last executing test programs: 1m22.609525348s ago: executing program 3 (id=418): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000001c0000f72bc12823809a9f00c00a00001b000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) unshare(0xc020400) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000600)=0xfaa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e01400004fcff", 0x58}], 0x1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000003c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x4004844) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000360000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c4000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYRES8=r7, @ANYRES32=0x0, @ANYBLOB="1c005a8018000180140003aa2a46e7452fde3c579f0000000006090000aa318cbd0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x400c000}, 0x20001) getsockname$packet(r7, &(0x7f0000000340), &(0x7f0000000380)=0x14) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) shutdown(r3, 0x2) 1m15.864402516s ago: executing program 2 (id=1253): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x20, 0x9fbb, 0xfffffff8, {{0x29, 0x4, 0x1, 0x1d, 0xa4, 0x66, 0x0, 0x3, 0x29, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0xe7, 0x0, 0x2, [0x6, 0x9, 0x7fffffff, 0x2, 0x0, 0x0]}, @timestamp_addr={0x44, 0x1c, 0x6, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xc2}, {@empty, 0xfff0}]}, @noop, @timestamp_prespec={0x44, 0xc, 0xf1, 0x3, 0x7, [{@private=0xa010100, 0x8}]}, @generic={0x6, 0x2}, @end, @timestamp_addr={0x44, 0x44, 0x30, 0x1, 0x5, [{@loopback, 0x5}, {@broadcast, 0x400}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x3}, {@loopback, 0x8d4a}, {@private=0xa010102, 0x91d}, {@private=0xa010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x7}]}]}}}}}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/163, 0xa3, 0x3ff) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x10, 0x80000) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000280)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000002c0)=0x2c) (async) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000280)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000002c0)=0x2c) r4 = socket(0x29, 0x2, 0x9) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x4, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{0x7, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x8}, {0x9}, {0xe}, {0x7}], @ipv4=@icmp={{0x7, 0x4, 0x2, 0x39, 0x30, 0x68, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, {[@ssrr={0x89, 0x7, 0x8e, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x5, 0x7, 0x53, 0xfffffff7, 0x77dcc81c}}}}}}, &(0x7f0000000380)={0x1, 0x4, [0x2d8, 0x40b, 0x76d, 0x734]}) ioctl(r2, 0x7ff, &(0x7f00000003c0)="6d6bea24b9929ba3ed3d0f04e671e919a7bc3e14259998984b679c17bf3695a4b2c61c86f6a1b349916ee2862ec0b4cc9e9b752876188ab05297df0530546c0b27e92d5652761244d933a922864d391ff972e4be4f840b806f4f43d84d4d00e807e51083c7f8a8bb6790d171dcd0495b1e5bf614de6531d17ff6b8a578f03b3f22799b764de1200991923e4fc23a04f5a9bd27b088a0b5c95e1b91e9c070532f5fc1342de2b63c1f7b80a7f2944f4e484ab8743e7874403285d86ef2dbbf7767a501411cbc6fe6b1ed76981209988586412074cee774bf7204a2f97c5cc4e60a7e856376b43627323b") getsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f00000004c0)={@initdev, @multicast1}, &(0x7f0000000500)=0x8) (async) getsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f00000004c0)={@initdev, @multicast1}, &(0x7f0000000500)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0xe}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x303}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0x6}, 0x8) r7 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000700)=[{{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x18) close(r7) (async) close(r7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000740)={@ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffa, 0x1, 0xfd, 0x6, 0x9, 0x7}, 0x20) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000780)=@raw=[@ringbuf_query, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}], &(0x7f0000000800)='GPL\x00', 0x7, 0x41, &(0x7f0000000840)=""/65, 0x41000, 0x4, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x5, 0x7, 0x0, 0xc302}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000900)=[{0x3, 0x3, 0x2, 0x1}], 0x10, 0x3005}, 0x90) ioctl$FIGETBSZ(r8, 0x2, &(0x7f0000000a00)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r10, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}}, 0x1) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r10, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}}, 0x1) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000bc0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, r11, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa9ac6a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) (async) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, r11, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa9ac6a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) write$cgroup_int(r3, &(0x7f0000000d80)=0x9, 0x12) (async) write$cgroup_int(r3, &(0x7f0000000d80)=0x9, 0x12) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000dc0)=""/233, &(0x7f0000000ec0)=0xe9) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000001080)={'broute\x00', 0x0, 0x4, 0xa1, [0x6e, 0x80000001, 0x0, 0x88d2, 0x6, 0x9], 0xa, &(0x7f0000000f00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000fc0)=""/161}, &(0x7f0000001100)=0x78) 1m9.511189785s ago: executing program 3 (id=418): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000001c0000f72bc12823809a9f00c00a00001b000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) unshare(0xc020400) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000600)=0xfaa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e01400004fcff", 0x58}], 0x1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000003c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x4004844) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000360000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c4000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYRES8=r7, @ANYRES32=0x0, @ANYBLOB="1c005a8018000180140003aa2a46e7452fde3c579f0000000006090000aa318cbd0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x400c000}, 0x20001) getsockname$packet(r7, &(0x7f0000000340), &(0x7f0000000380)=0x14) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) shutdown(r3, 0x2) 1m7.296681826s ago: executing program 2 (id=1253): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x20, 0x9fbb, 0xfffffff8, {{0x29, 0x4, 0x1, 0x1d, 0xa4, 0x66, 0x0, 0x3, 0x29, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0xe7, 0x0, 0x2, [0x6, 0x9, 0x7fffffff, 0x2, 0x0, 0x0]}, @timestamp_addr={0x44, 0x1c, 0x6, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xc2}, {@empty, 0xfff0}]}, @noop, @timestamp_prespec={0x44, 0xc, 0xf1, 0x3, 0x7, [{@private=0xa010100, 0x8}]}, @generic={0x6, 0x2}, @end, @timestamp_addr={0x44, 0x44, 0x30, 0x1, 0x5, [{@loopback, 0x5}, {@broadcast, 0x400}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x3}, {@loopback, 0x8d4a}, {@private=0xa010102, 0x91d}, {@private=0xa010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x7}]}]}}}}}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/163, 0xa3, 0x3ff) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x10, 0x80000) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000280)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000002c0)=0x2c) (async) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000280)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000002c0)=0x2c) r4 = socket(0x29, 0x2, 0x9) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x4, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{0x7, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x8}, {0x9}, {0xe}, {0x7}], @ipv4=@icmp={{0x7, 0x4, 0x2, 0x39, 0x30, 0x68, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, {[@ssrr={0x89, 0x7, 0x8e, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x5, 0x7, 0x53, 0xfffffff7, 0x77dcc81c}}}}}}, &(0x7f0000000380)={0x1, 0x4, [0x2d8, 0x40b, 0x76d, 0x734]}) ioctl(r2, 0x7ff, &(0x7f00000003c0)="6d6bea24b9929ba3ed3d0f04e671e919a7bc3e14259998984b679c17bf3695a4b2c61c86f6a1b349916ee2862ec0b4cc9e9b752876188ab05297df0530546c0b27e92d5652761244d933a922864d391ff972e4be4f840b806f4f43d84d4d00e807e51083c7f8a8bb6790d171dcd0495b1e5bf614de6531d17ff6b8a578f03b3f22799b764de1200991923e4fc23a04f5a9bd27b088a0b5c95e1b91e9c070532f5fc1342de2b63c1f7b80a7f2944f4e484ab8743e7874403285d86ef2dbbf7767a501411cbc6fe6b1ed76981209988586412074cee774bf7204a2f97c5cc4e60a7e856376b43627323b") getsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f00000004c0)={@initdev, @multicast1}, &(0x7f0000000500)=0x8) (async) getsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f00000004c0)={@initdev, @multicast1}, &(0x7f0000000500)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0xe}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x303}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0x6}, 0x8) r7 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000700)=[{{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x18) close(r7) (async) close(r7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000740)={@ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffa, 0x1, 0xfd, 0x6, 0x9, 0x7}, 0x20) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000780)=@raw=[@ringbuf_query, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}], &(0x7f0000000800)='GPL\x00', 0x7, 0x41, &(0x7f0000000840)=""/65, 0x41000, 0x4, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x5, 0x7, 0x0, 0xc302}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000900)=[{0x3, 0x3, 0x2, 0x1}], 0x10, 0x3005}, 0x90) ioctl$FIGETBSZ(r8, 0x2, &(0x7f0000000a00)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r10, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}}, 0x1) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r10, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}}, 0x1) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000bc0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, r11, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa9ac6a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) (async) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, r11, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa9ac6a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) write$cgroup_int(r3, &(0x7f0000000d80)=0x9, 0x12) (async) write$cgroup_int(r3, &(0x7f0000000d80)=0x9, 0x12) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000dc0)=""/233, &(0x7f0000000ec0)=0xe9) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000001080)={'broute\x00', 0x0, 0x4, 0xa1, [0x6e, 0x80000001, 0x0, 0x88d2, 0x6, 0x9], 0xa, &(0x7f0000000f00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000fc0)=""/161}, &(0x7f0000001100)=0x78) 51.875181617s ago: executing program 2 (id=1253): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x20, 0x9fbb, 0xfffffff8, {{0x29, 0x4, 0x1, 0x1d, 0xa4, 0x66, 0x0, 0x3, 0x29, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0xe7, 0x0, 0x2, [0x6, 0x9, 0x7fffffff, 0x2, 0x0, 0x0]}, @timestamp_addr={0x44, 0x1c, 0x6, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xc2}, {@empty, 0xfff0}]}, @noop, @timestamp_prespec={0x44, 0xc, 0xf1, 0x3, 0x7, [{@private=0xa010100, 0x8}]}, @generic={0x6, 0x2}, @end, @timestamp_addr={0x44, 0x44, 0x30, 0x1, 0x5, [{@loopback, 0x5}, {@broadcast, 0x400}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x3}, {@loopback, 0x8d4a}, {@private=0xa010102, 0x91d}, {@private=0xa010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x7}]}]}}}}}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/163, 0xa3, 0x3ff) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x10, 0x80000) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000280)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000002c0)=0x2c) (async) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000280)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000002c0)=0x2c) r4 = socket(0x29, 0x2, 0x9) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x4, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{0x7, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x8}, {0x9}, {0xe}, {0x7}], @ipv4=@icmp={{0x7, 0x4, 0x2, 0x39, 0x30, 0x68, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, {[@ssrr={0x89, 0x7, 0x8e, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x5, 0x7, 0x53, 0xfffffff7, 0x77dcc81c}}}}}}, &(0x7f0000000380)={0x1, 0x4, [0x2d8, 0x40b, 0x76d, 0x734]}) ioctl(r2, 0x7ff, &(0x7f00000003c0)="6d6bea24b9929ba3ed3d0f04e671e919a7bc3e14259998984b679c17bf3695a4b2c61c86f6a1b349916ee2862ec0b4cc9e9b752876188ab05297df0530546c0b27e92d5652761244d933a922864d391ff972e4be4f840b806f4f43d84d4d00e807e51083c7f8a8bb6790d171dcd0495b1e5bf614de6531d17ff6b8a578f03b3f22799b764de1200991923e4fc23a04f5a9bd27b088a0b5c95e1b91e9c070532f5fc1342de2b63c1f7b80a7f2944f4e484ab8743e7874403285d86ef2dbbf7767a501411cbc6fe6b1ed76981209988586412074cee774bf7204a2f97c5cc4e60a7e856376b43627323b") getsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f00000004c0)={@initdev, @multicast1}, &(0x7f0000000500)=0x8) (async) getsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f00000004c0)={@initdev, @multicast1}, &(0x7f0000000500)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0xe}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x303}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0x6}, 0x8) r7 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000700)=[{{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x18) close(r7) (async) close(r7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000740)={@ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffa, 0x1, 0xfd, 0x6, 0x9, 0x7}, 0x20) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000780)=@raw=[@ringbuf_query, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}], &(0x7f0000000800)='GPL\x00', 0x7, 0x41, &(0x7f0000000840)=""/65, 0x41000, 0x4, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x5, 0x7, 0x0, 0xc302}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000900)=[{0x3, 0x3, 0x2, 0x1}], 0x10, 0x3005}, 0x90) ioctl$FIGETBSZ(r8, 0x2, &(0x7f0000000a00)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r10, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}}, 0x1) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r10, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}}, 0x1) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000bc0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, r11, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa9ac6a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) (async) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, r11, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa9ac6a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) write$cgroup_int(r3, &(0x7f0000000d80)=0x9, 0x12) (async) write$cgroup_int(r3, &(0x7f0000000d80)=0x9, 0x12) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000dc0)=""/233, &(0x7f0000000ec0)=0xe9) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000001080)={'broute\x00', 0x0, 0x4, 0xa1, [0x6e, 0x80000001, 0x0, 0x88d2, 0x6, 0x9], 0xa, &(0x7f0000000f00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000fc0)=""/161}, &(0x7f0000001100)=0x78) 50.497712953s ago: executing program 3 (id=418): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000001c0000f72bc12823809a9f00c00a00001b000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) unshare(0xc020400) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000600)=0xfaa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e01400004fcff", 0x58}], 0x1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000003c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x4004844) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000360000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c4000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYRES8=r7, @ANYRES32=0x0, @ANYBLOB="1c005a8018000180140003aa2a46e7452fde3c579f0000000006090000aa318cbd0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x400c000}, 0x20001) getsockname$packet(r7, &(0x7f0000000340), &(0x7f0000000380)=0x14) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) shutdown(r3, 0x2) 35.889312344s ago: executing program 2 (id=1253): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x20, 0x9fbb, 0xfffffff8, {{0x29, 0x4, 0x1, 0x1d, 0xa4, 0x66, 0x0, 0x3, 0x29, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0xe7, 0x0, 0x2, [0x6, 0x9, 0x7fffffff, 0x2, 0x0, 0x0]}, @timestamp_addr={0x44, 0x1c, 0x6, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xc2}, {@empty, 0xfff0}]}, @noop, @timestamp_prespec={0x44, 0xc, 0xf1, 0x3, 0x7, [{@private=0xa010100, 0x8}]}, @generic={0x6, 0x2}, @end, @timestamp_addr={0x44, 0x44, 0x30, 0x1, 0x5, [{@loopback, 0x5}, {@broadcast, 0x400}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x3}, {@loopback, 0x8d4a}, {@private=0xa010102, 0x91d}, {@private=0xa010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x7}]}]}}}}}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/163, 0xa3, 0x3ff) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x10, 0x80000) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000280)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000002c0)=0x2c) (async) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000280)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000002c0)=0x2c) r4 = socket(0x29, 0x2, 0x9) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x4, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{0x7, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x8}, {0x9}, {0xe}, {0x7}], @ipv4=@icmp={{0x7, 0x4, 0x2, 0x39, 0x30, 0x68, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, {[@ssrr={0x89, 0x7, 0x8e, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x5, 0x7, 0x53, 0xfffffff7, 0x77dcc81c}}}}}}, &(0x7f0000000380)={0x1, 0x4, [0x2d8, 0x40b, 0x76d, 0x734]}) ioctl(r2, 0x7ff, &(0x7f00000003c0)="6d6bea24b9929ba3ed3d0f04e671e919a7bc3e14259998984b679c17bf3695a4b2c61c86f6a1b349916ee2862ec0b4cc9e9b752876188ab05297df0530546c0b27e92d5652761244d933a922864d391ff972e4be4f840b806f4f43d84d4d00e807e51083c7f8a8bb6790d171dcd0495b1e5bf614de6531d17ff6b8a578f03b3f22799b764de1200991923e4fc23a04f5a9bd27b088a0b5c95e1b91e9c070532f5fc1342de2b63c1f7b80a7f2944f4e484ab8743e7874403285d86ef2dbbf7767a501411cbc6fe6b1ed76981209988586412074cee774bf7204a2f97c5cc4e60a7e856376b43627323b") getsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f00000004c0)={@initdev, @multicast1}, &(0x7f0000000500)=0x8) (async) getsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f00000004c0)={@initdev, @multicast1}, &(0x7f0000000500)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0xe}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x303}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0x6}, 0x8) r7 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000700)=[{{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x18) close(r7) (async) close(r7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000740)={@ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffa, 0x1, 0xfd, 0x6, 0x9, 0x7}, 0x20) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000780)=@raw=[@ringbuf_query, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}], &(0x7f0000000800)='GPL\x00', 0x7, 0x41, &(0x7f0000000840)=""/65, 0x41000, 0x4, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x5, 0x7, 0x0, 0xc302}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000900)=[{0x3, 0x3, 0x2, 0x1}], 0x10, 0x3005}, 0x90) ioctl$FIGETBSZ(r8, 0x2, &(0x7f0000000a00)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r10, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}}, 0x1) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r10, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}}, 0x1) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000bc0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, r11, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa9ac6a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) (async) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, r11, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa9ac6a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) write$cgroup_int(r3, &(0x7f0000000d80)=0x9, 0x12) (async) write$cgroup_int(r3, &(0x7f0000000d80)=0x9, 0x12) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000dc0)=""/233, &(0x7f0000000ec0)=0xe9) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000001080)={'broute\x00', 0x0, 0x4, 0xa1, [0x6e, 0x80000001, 0x0, 0x88d2, 0x6, 0x9], 0xa, &(0x7f0000000f00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000fc0)=""/161}, &(0x7f0000001100)=0x78) 34.816140923s ago: executing program 3 (id=418): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000001c0000f72bc12823809a9f00c00a00001b000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) unshare(0xc020400) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000600)=0xfaa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e01400004fcff", 0x58}], 0x1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000003c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x4004844) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000360000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c4000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYRES8=r7, @ANYRES32=0x0, @ANYBLOB="1c005a8018000180140003aa2a46e7452fde3c579f0000000006090000aa318cbd0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x400c000}, 0x20001) getsockname$packet(r7, &(0x7f0000000340), &(0x7f0000000380)=0x14) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) shutdown(r3, 0x2) 23.377309183s ago: executing program 2 (id=1253): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x20, 0x9fbb, 0xfffffff8, {{0x29, 0x4, 0x1, 0x1d, 0xa4, 0x66, 0x0, 0x3, 0x29, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0xe7, 0x0, 0x2, [0x6, 0x9, 0x7fffffff, 0x2, 0x0, 0x0]}, @timestamp_addr={0x44, 0x1c, 0x6, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xc2}, {@empty, 0xfff0}]}, @noop, @timestamp_prespec={0x44, 0xc, 0xf1, 0x3, 0x7, [{@private=0xa010100, 0x8}]}, @generic={0x6, 0x2}, @end, @timestamp_addr={0x44, 0x44, 0x30, 0x1, 0x5, [{@loopback, 0x5}, {@broadcast, 0x400}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x3}, {@loopback, 0x8d4a}, {@private=0xa010102, 0x91d}, {@private=0xa010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x7}]}]}}}}}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/163, 0xa3, 0x3ff) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x10, 0x80000) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000280)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000002c0)=0x2c) (async) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000280)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000002c0)=0x2c) r4 = socket(0x29, 0x2, 0x9) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x4, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{0x7, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x8}, {0x9}, {0xe}, {0x7}], @ipv4=@icmp={{0x7, 0x4, 0x2, 0x39, 0x30, 0x68, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, {[@ssrr={0x89, 0x7, 0x8e, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x5, 0x7, 0x53, 0xfffffff7, 0x77dcc81c}}}}}}, &(0x7f0000000380)={0x1, 0x4, [0x2d8, 0x40b, 0x76d, 0x734]}) ioctl(r2, 0x7ff, &(0x7f00000003c0)="6d6bea24b9929ba3ed3d0f04e671e919a7bc3e14259998984b679c17bf3695a4b2c61c86f6a1b349916ee2862ec0b4cc9e9b752876188ab05297df0530546c0b27e92d5652761244d933a922864d391ff972e4be4f840b806f4f43d84d4d00e807e51083c7f8a8bb6790d171dcd0495b1e5bf614de6531d17ff6b8a578f03b3f22799b764de1200991923e4fc23a04f5a9bd27b088a0b5c95e1b91e9c070532f5fc1342de2b63c1f7b80a7f2944f4e484ab8743e7874403285d86ef2dbbf7767a501411cbc6fe6b1ed76981209988586412074cee774bf7204a2f97c5cc4e60a7e856376b43627323b") getsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f00000004c0)={@initdev, @multicast1}, &(0x7f0000000500)=0x8) (async) getsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f00000004c0)={@initdev, @multicast1}, &(0x7f0000000500)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0xe}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x303}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0x6}, 0x8) r7 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000700)=[{{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x18) close(r7) (async) close(r7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000740)={@ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffa, 0x1, 0xfd, 0x6, 0x9, 0x7}, 0x20) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000780)=@raw=[@ringbuf_query, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}], &(0x7f0000000800)='GPL\x00', 0x7, 0x41, &(0x7f0000000840)=""/65, 0x41000, 0x4, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x5, 0x7, 0x0, 0xc302}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000900)=[{0x3, 0x3, 0x2, 0x1}], 0x10, 0x3005}, 0x90) ioctl$FIGETBSZ(r8, 0x2, &(0x7f0000000a00)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r10, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}}, 0x1) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r10, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}}, 0x1) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000bc0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, r11, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa9ac6a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) (async) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, r11, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa9ac6a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) write$cgroup_int(r3, &(0x7f0000000d80)=0x9, 0x12) (async) write$cgroup_int(r3, &(0x7f0000000d80)=0x9, 0x12) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000dc0)=""/233, &(0x7f0000000ec0)=0xe9) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000001080)={'broute\x00', 0x0, 0x4, 0xa1, [0x6e, 0x80000001, 0x0, 0x88d2, 0x6, 0x9], 0xa, &(0x7f0000000f00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000fc0)=""/161}, &(0x7f0000001100)=0x78) 21.257376265s ago: executing program 3 (id=418): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000001c0000f72bc12823809a9f00c00a00001b000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) unshare(0xc020400) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000600)=0xfaa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e01400004fcff", 0x58}], 0x1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000003c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x4004844) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000360000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c4000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYRES8=r7, @ANYRES32=0x0, @ANYBLOB="1c005a8018000180140003aa2a46e7452fde3c579f0000000006090000aa318cbd0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x400c000}, 0x20001) getsockname$packet(r7, &(0x7f0000000340), &(0x7f0000000380)=0x14) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) shutdown(r3, 0x2) 10.674124302s ago: executing program 2 (id=1253): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x20, 0x9fbb, 0xfffffff8, {{0x29, 0x4, 0x1, 0x1d, 0xa4, 0x66, 0x0, 0x3, 0x29, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0xe7, 0x0, 0x2, [0x6, 0x9, 0x7fffffff, 0x2, 0x0, 0x0]}, @timestamp_addr={0x44, 0x1c, 0x6, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xc2}, {@empty, 0xfff0}]}, @noop, @timestamp_prespec={0x44, 0xc, 0xf1, 0x3, 0x7, [{@private=0xa010100, 0x8}]}, @generic={0x6, 0x2}, @end, @timestamp_addr={0x44, 0x44, 0x30, 0x1, 0x5, [{@loopback, 0x5}, {@broadcast, 0x400}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x3}, {@loopback, 0x8d4a}, {@private=0xa010102, 0x91d}, {@private=0xa010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x7}]}]}}}}}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/163, 0xa3, 0x3ff) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x10, 0x80000) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000280)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000002c0)=0x2c) (async) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000280)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000002c0)=0x2c) r4 = socket(0x29, 0x2, 0x9) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x4, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{0x7, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x8}, {0x9}, {0xe}, {0x7}], @ipv4=@icmp={{0x7, 0x4, 0x2, 0x39, 0x30, 0x68, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, {[@ssrr={0x89, 0x7, 0x8e, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x5, 0x7, 0x53, 0xfffffff7, 0x77dcc81c}}}}}}, &(0x7f0000000380)={0x1, 0x4, [0x2d8, 0x40b, 0x76d, 0x734]}) ioctl(r2, 0x7ff, &(0x7f00000003c0)="6d6bea24b9929ba3ed3d0f04e671e919a7bc3e14259998984b679c17bf3695a4b2c61c86f6a1b349916ee2862ec0b4cc9e9b752876188ab05297df0530546c0b27e92d5652761244d933a922864d391ff972e4be4f840b806f4f43d84d4d00e807e51083c7f8a8bb6790d171dcd0495b1e5bf614de6531d17ff6b8a578f03b3f22799b764de1200991923e4fc23a04f5a9bd27b088a0b5c95e1b91e9c070532f5fc1342de2b63c1f7b80a7f2944f4e484ab8743e7874403285d86ef2dbbf7767a501411cbc6fe6b1ed76981209988586412074cee774bf7204a2f97c5cc4e60a7e856376b43627323b") getsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f00000004c0)={@initdev, @multicast1}, &(0x7f0000000500)=0x8) (async) getsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f00000004c0)={@initdev, @multicast1}, &(0x7f0000000500)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0xe}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x303}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0x6}, 0x8) r7 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000700)=[{{0x4, 0x1, 0x0, 0x1}, {0x0, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x18) close(r7) (async) close(r7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000740)={@ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffa, 0x1, 0xfd, 0x6, 0x9, 0x7}, 0x20) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000780)=@raw=[@ringbuf_query, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}], &(0x7f0000000800)='GPL\x00', 0x7, 0x41, &(0x7f0000000840)=""/65, 0x41000, 0x4, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x5, 0x7, 0x0, 0xc302}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000900)=[{0x3, 0x3, 0x2, 0x1}], 0x10, 0x3005}, 0x90) ioctl$FIGETBSZ(r8, 0x2, &(0x7f0000000a00)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r10, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}}, 0x1) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r10, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}}, 0x1) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000bc0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, r11, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa9ac6a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) (async) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, r11, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa9ac6a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) write$cgroup_int(r3, &(0x7f0000000d80)=0x9, 0x12) (async) write$cgroup_int(r3, &(0x7f0000000d80)=0x9, 0x12) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000dc0)=""/233, &(0x7f0000000ec0)=0xe9) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000001080)={'broute\x00', 0x0, 0x4, 0xa1, [0x6e, 0x80000001, 0x0, 0x88d2, 0x6, 0x9], 0xa, &(0x7f0000000f00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000fc0)=""/161}, &(0x7f0000001100)=0x78) 9.443273339s ago: executing program 3 (id=418): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000001c0000f72bc12823809a9f00c00a00001b000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) unshare(0xc020400) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000600)=0xfaa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e01400004fcff", 0x58}], 0x1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000003c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x4004844) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000360000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c4000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYRES8=r7, @ANYRES32=0x0, @ANYBLOB="1c005a8018000180140003aa2a46e7452fde3c579f0000000006090000aa318cbd0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x400c000}, 0x20001) getsockname$packet(r7, &(0x7f0000000340), &(0x7f0000000380)=0x14) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) shutdown(r3, 0x2) 3.076662299s ago: executing program 0 (id=1776): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x41, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@generic='\nN']}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="44fa543ad045b8b69f4a31000000100000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050015000100000008000a0001000000"], 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)={0x2c, r3, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x29c, r3, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xc4da, 0x4e}}}}, [@NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x194, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xec, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1c, 0xab94, 0x1, 0x3d8f, 0x4579, 0x3, 0x380f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfff, 0x6, 0x4, 0x0, 0x80, 0x7, 0x7f]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x1}, {0x1, 0x8}, {0x6, 0x6}, {0x3, 0x6}, {0x2, 0x6}, {0x3, 0x3}, {0x4, 0x2}, {0x5, 0x1}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x8}, {0x7, 0x9}, {0x2, 0x4}, {0x5, 0xa}, {0x5, 0x1}, {0x7, 0x8}, {0x7, 0x9}, {0x7, 0x3}, {0x7, 0x9}, {0x2, 0xa}, {0x2, 0x3}, {0x6, 0x9}, {0x3, 0x2}, {0x2, 0x5}, {0x6, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x4}, {0x6}, {0x4, 0x1}, {0x2, 0x5}, {0x4, 0x7}, {0x0, 0x8}, {0x3, 0x3}, {0x1, 0x4}, {0x7, 0x5}, {0x4, 0x7}, {0x3, 0x5}, {0x7, 0x8}, {0x0, 0x3}, {0x0, 0x8}, {0x1, 0x7}, {0x3, 0x7}, {0x0, 0x9}, {0x7, 0x7}, {0x4, 0x7}, {0x4, 0x8}, {0x4, 0x2}, {0x3, 0xa}, {0x6, 0x8}, {0x1, 0x7}, {0x5, 0x2}, {0x3, 0xa}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x18, 0x6c, 0x16, 0x53, 0x6, 0x36, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x82}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x7, 0x4, 0x200, 0x3, 0x2, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x12, 0x0, 0x24, 0xc, 0x4, 0x18, 0x60]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x7}, {0x0, 0x6}, {0x7, 0x1}, {0x4, 0xa}, {0x0, 0x4}, {0x6, 0x9}, {0x3, 0x1}, {0x3, 0xa}, {0x1, 0x4}, {0x7, 0x2}, {0x3, 0x8}, {0x5, 0x1}, {0x4, 0x3}, {0x2, 0x8}, {0x6, 0x5}, {0x0, 0x4}, {0x0, 0x6}, {0x4, 0x6}, {0x6, 0x7}, {0x2, 0x2}, {0x6, 0x7}, {0x1, 0x9}, {0x2, 0x5}, {0x7}, {0x5, 0x5}, {0x1, 0x2}, {0x3, 0x2}, {0x2}, {0x6, 0xa}, {0x0, 0x4}, {0x1, 0x3}, {0x0, 0x3}, {0x5, 0x2}, {0x5}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x1}, {0x6, 0x8}, {0x2, 0x1}, {0x4, 0x6}, {0x6, 0x5}, {0x5, 0x8}, {0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x3}, {0x3, 0x5}, {0x4, 0x7}, {0x2, 0xa}, {0x4, 0x6}, {0x0, 0x2}, {0x4, 0x8}, {0x2, 0x3}, {0x0, 0x8}, {0x4, 0x5}, {0x3, 0x1}, {0x1, 0x7}, {0x2, 0x4}, {0x3, 0x8}, {0x3, 0x1}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0x6}, {0x1, 0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x1, 0x0, 0x1ff, 0x2, 0x7, 0xf]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x3}, {0x7}, {0x3, 0x8}, {0x4, 0x5}, {0x0, 0x2}, {0x4, 0x8}, {0x7, 0x9}, {0x4, 0x1}, {0x0, 0x9}, {0x6, 0x1}, {0x6, 0x5}, {0x5, 0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x2, 0x7}, {0x6, 0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x2, 0x4}, {0x3, 0x6}, {0x0, 0x6}, {0x7, 0x6}, {0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x7, 0x101, 0x8, 0xff, 0x101f, 0x5eb4, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x101, 0xf48, 0x4, 0x2, 0x1, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x36, 0x1, 0x1, 0x12, 0x24, 0x0, 0x4, 0x9, 0x1, 0x12, 0x2, 0x6c, 0x9, 0x18, 0x1b, 0x6, 0x1, 0x2, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2, 0x3, 0x12, 0x3, 0x36, 0x30, 0xb, 0x5, 0xc, 0x48, 0x16, 0x9, 0x36, 0x6c, 0xb, 0x16, 0x3, 0x30]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x48, 0x4, 0x30, 0x1, 0x2, 0x18, 0x24, 0xb, 0x48, 0x9, 0x9, 0x4]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x2}, {0x2, 0x5}, {0x2, 0x8}, {0x1}, {0x2, 0x2}, {0x3, 0x8}, {0x1, 0x1}, {0x4, 0x4}, {0x6, 0x1}, {0x4, 0x8}, {0x3, 0x1}, {0x3, 0x6}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x7}, {0x3, 0x5}, {0x4, 0x6}, {0x6, 0x7}, {0x3, 0x6}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0xa, 0x3, 0x8, 0xff7c, 0x8, 0x81]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x3}, {0x3, 0x8}, {0x3, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x4, 0xa}, {0x6}, {0x4, 0x5}, {0x7, 0x8}, {0x0, 0x9}, {0x4, 0x7}, {0x0, 0xa}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x5}, {0x5, 0x9}, {0x0, 0x2}, {0x5, 0x5}, {0x0, 0x9}, {0x7, 0x7}, {0x0, 0x6}, {0x6, 0x9}, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x4}, {0x6, 0x7}, {0x4, 0x8}, {0x5, 0x5}, {0x1, 0x3}, {0x5, 0x3}, {0x2, 0x6}, {0x1, 0x1}, {0x0, 0x1}, {0x7, 0x7}, {0x0, 0x5}, {0x1, 0xa}, {0x6, 0xa}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}]}]}]}, 0x29c}}, 0x5) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x3}}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0xf}, 0xc1) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xefff, 0x600}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x0) listen(r10, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r9, 0x0, 0x4ffe2, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f0000000000), &(0x7f0000000140)=0x4) 2.73665095s ago: executing program 4 (id=1779): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2}}}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x454}, 0x880) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000140)=0xafe1) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e20, @remote}, {0x6, @broadcast}, 0x42, {0x2, 0x4e24, @empty}, 'vcan0\x00'}) pwrite64(r0, &(0x7f0000000200)="26bf0123bcfb9a378fb55df4f21f10e9f92261a51951bb87c018e15071ea10816a125c559a037255e0182880bdb2cc0da053801a1b64314d99a333ddc2a5bfe4312a763941ff03ab4766efc6541ee9c847935b397c36b72fea0269387ba9b8cb59d4ff9fc77882d2bd7556dceb44544cc953907d5b2cc01f07fc001af7d7cd6de7c09b20de0259af98e1ac5a19418082386902650f57d2db9d48a656e5a0705d82825a36b1d2c3a832fd62e5776462061699217ed69188de344905300e337ea6fd97385e6f29317cd0c67f4cf09813e8836d1775775ea9bdb1a9a54487fd03ddd5aa4c99c21af9a94b74e89bc36c8a352923ad2cc38fc38e4f4311f96ad8ce36666c86e5c5c5ac1b8015b1b47ec78a3f54897d1b4134e8dfd4c859a52af030198848e2bd184c892944c58ee5ff90cecae33147662ba2da2cd6bc5547c32ef1ab444fac7804b1f2323b0b61a8b2735defc895e2722ef5c7e04004555ea1628fba6b4baafc93114d844af7dfd2911470c3e8e7f8e943510a27ce316431ea8c748e0578c688ad23972203809ed79f2e3a54e6aa6fba78631bd68ecae0f146e9f1b101c153d7e85e62e51121262138e3704e874082578c083f8e198aa6553d0afcfe7c5326786be93b00cb49bf727ccf31369094cfc4bf6038993e632cce01724300fc0d4c0e0119e9532074ac7d801b533e7649950f7fa723e1539f8ead12f694a076b3e70e51056d86aea3f6bb4e847561df25f1d0d62e5d77901f4e2ea96b142ea2f79e4e533e963a87d9542301973a0391e0e53ddf7018d8f729ee4dd79b052c6bc14ece51a641b1202d69248cbe4b8f9aa44aeab96939afeb0cde3da16ff883afc9b89f6ec92d56959df9487eb24c88ddcdf1c34d4e980e9d2c4850bca196dbd6443c93edb5a7eb3ff7b121e4b79a14e18593e1edde7130c5375d617c5e136b7f5de4b1b97b0f623c7d9035102fb138445dfacf0e9f8d4de77b5aa1caf1aec92287df4acf0edafd04706692999256c6510dd082a42b0842fdcb64b64a4a3d19f72cb5adc7180fd07aeabd450f82f47b6aff735b65d3f5869cc7ca911ef178d6c1d17f46e2434f55dfb584051174fcab399731bd9fd9e3a1d0b4d304eecc2b73f9188460fa07ab2e3e106b3fc7bc53989cba6d15acfcfc48e42c1edc2105740faedd7aa858d81a644ddfc5b1b962d12f5019ed115d143591f43227d3fd5af5b2fb218910af6684bac59dc05c042baf4d0d2de4fad456a8011fef432439aecbd5d1bf8b090fd677dcd32b1247e08b6b7a0c1daa6836c7e17da7953e7550d562df648efd9792e011ac3c27df10d5d94edc0162cf12a7805b4f6792dc32979fea1d84ee598de05b23d844c64decb53bb596b01b70229bda36a92e69a2511f0d205c3f18967ea63c4d0bc29ca203e5849f23c467e62d11e3ee9e9a5bdc042e0133f63cbdd65bbac8b807a8c2e803748e3f001744280c4f22d269e0850ac2100e7379fe600f9ca6dadaafeb8f2750d41f03bc07c8dd43c132a1ea916ade6db10abd50a6e8c96e2f96501cbc90aa9ef87544eb5943edf94f7bba6d03db8dd8a84e0247e237273e16ca9be335ebed755872bcd5d7ecf2603f0cde14d914cc6ac8195a5145ab7c38386a912fda741345bc73b15db6b7fd6a7a28af6f06c278e9e3e6b7d73c5aebfc0e787801ab10b9ca339b64fd83ae78b701cc8ffcb91a648080cd5dfda5b9013ddbd4d7f1ed61da5ae4e428c7eb75b1a6dc7969c0048c170a8d4c168bdbedaf5dd843c575a1e08a8608b92202e1d2f9835c176d134320fd1f62f9f01f80a819a0a820462b1b2b90ec33e03a7753378de5fa47159f820363b2f523576287f68ef71a2a1fd6d94617a45566d5c586cfe3b4c8ae1cd77a4f46719b1139fbe8bc75a55bd1031cd44eafedefa686274f19442f42251cece38722c890704c05bcd88acf3d9fd1992288e09f4ca5f93bdf13f4c618fa6b6c9709f0dc4283e5b5ed5b4dec67eb3a1c25455393271cb2f60cb2c1283534b3755cf950354a3083603a305f5643948cfc4ecb73324bb41507f1296c491143096d33d2e4b625294e601f0dbf271e8587549a7a7768ac2f1b6a2b8ab4d69483d5f7e130861308afb9f987767fc07d54553deb16d4f795f9c623a98655e525b9c06d0bdf56db5b6b988690df6a8c636ec4a93a2230d2f8b0d5f18150bbc020046faebdf75d288b1efebe65acc56d411e1f5a66d0ef19edaaba087df8192ad150d34e3f7c9736b276c314dd1c4d89f016badf731d532bf53b35fd62cfea86884a6f9e77b152deef229cc2e52575fef7fa2cc5aecc8a9756d071634ae4e4d9f20f08b11f2d4bf0adc01ef79beeb09aa1f2a957fbbe59c4fc463fed7dcb9e0f1f08d5cc8603b3049ee46c58dfd521f0bf85516f05069849ab8e1cdca32829aed1fd0290d7dca31c804efcf73e19688313ac263e5921483d29e1fe254c116dff34fc9a616866e5408206806015a7c3ec4125b3b06bf4754287ba0c6fb085e1f9e82dc35b006400b7dd4cd1027d9582635e9ebb6c7ec4aa8a77c0691c3509976b59f36b7ec49ea2b1a055ae7bab838d9795f8f65c109851410cb3e5ea341753a1e7abde24e67dda7d65043696f52c56f16d97c6752fca029ff0d479a5e6d6a0aaa15d29fdff713cb624e55ab5a57b6f92a6cf758ac9089d86bf299af0fa720b70460d9aafc8127e7fbbae32f95ad8dcff0312e6e2f836d1a1578285a4c77fa37849bdca24a74130f5d6354128aaf370fae02225aa1a36f1a2aa240cbb7224046316dc7134f628cf28b9f794d8b52df7674ea3972519b87bf0c17989db0b32df817d7f18be4749fe8ac10e97eb819afed5ea6f18bfa6bbfa0c5c34fc8c13d7d0f820f49a10a9bc29bf730a1a479f0fdb248e7529122774964c6cf353c22ceade94a7670cef3f627bd0b3c520882af430b5f1e04705f83c074fe0bbbfd9055f59211b6befd78d96ab5af1c6ad6d61b4d8d0f53ce8ca3aba7470762c27e01c4b127cab2e04d25485a55e0b895a0984506303186507642030443466fad7dc05613c8f97167d3382273029a4bde8ff9cbfe04c8e6667007fb82b6c2a75b6b0f27302ae50d760265e8f6d83171b9762c01508938e049c3e41fa6d25300b32a3f79479f94550c09d5b6d15e0c547e7f1e0e822fc5d42a1200081c026f92b5bdfbd9a06ea765755b65264a928b1df7125cabbcd807427d6147da10efad001fc14b720a91ddebf3b9fc359c099f1c88ddc6134c88f7e71649f174205d44e8fe7be6fc9bead22900501eecb90179a68ea91db956df240cea6651187a0a5b2b1ea6d9a97f465b28b41b06bde7c8a55601cd580c94b9b46ce1b5acb02d83315fe355df242aec1fdb998e82f3a7252bc472fa5759faf701a669a8296ff0f1d1e74a58f131cbcbcf683e3cb03c3e1e48a1575825f93f8d1888d738dcbd4683ddc8aa71c16ef60c7f76d8a4e7d5a359170610bacdd48647046174c90f0612f5e5890c07d3961bfa9f1b8019cb07db0920b8ac0d81f662620c9bbda8aa5f9f4d40a5f37e164eb58690af8f16a337f017bd42c24b5b79a990afc5c3a4ded240601ab368438a46d34163e3e4b7d56ad97e4301129a607281a8a40036a56d5b4fc6abdfd8300006698de6bf0a65bc8e66abfcce3689cec67300d51b9b51eba69bc51902444f5c4bb16eb72598ceeaf0f1161b3499d6c08986dded5ca4be76b65ead8bf52ed2fad50c16c8fe0dec516f5c24b3e3045d56dce673c3627cbc05dc687df450f0a5c8f543356d82656dae512d0c2e23ffdd08444d1ad9c3e89dc080b12c19f4aee7ae1b9b5133c77640024772e5a0389f709d1eec05604df38c409f2caabbe984127f7efc40f9e4ae9a11596bf3ae7b29a45ce9d64d80ff81d22ccf4b2178ce367c6395bf6be3646ee5db1d6229891f25fd4a14437e6cf72f871225eec2bf08bdd1628ba48e9e15c8298dc5ba81d1c4299454dad01c31adb7d8c78c3d3c7ef62b5213a812160da00a0c5c4ea95c2b1a5ef64e82362f6200d10a7dd880d64ea27c22537f251a764a670088364926d3102490eb1913c8a12486d0a90bd09e262af5e548cb1b64b9e106a0e412bffdca14c2e4f6475e03fdef480f5071cca11db25eeb59e2c7c8acd3b29b98beddd214830a1e6f1fd4773247e8c676185b78274cdad976779a98339deeef4bb84956722bb206f442c54fce258d22f03fcaa445838e7e94b7fafbe0f9dc867ff7c4487f3ed3db7c7a760df7639cd80a025b3deaf8d42ad618a595b5cf3c420e5aed83d2c0165c65a322c7e4ba9d4b9311a13fe23390f76c3020c2f5459c075cc57f05c8dfc38ba5f8d2a8f002ded73fa0cb900aeddc0d3a60d57f27c1c782d0a2956df52b03bd48761a2ea1bb58b46beb8bf9f22e8875350408c6cee12774327de03e2910fdc7ac0d0fc4d039ef35d2c89663ea3b53bee7ce5a77bc95dc6c4b727a239f48c56667ca73cf64e096740c23e96bdd9244c2eb5fc534b2f854f49dc72db96f543c2da1dcf39cd43835ae323483f6e458c2665a108e8b9cdb16d3b7673e76bcc1139b530d5577e4e84c65a5aa65d54ba0febcdc00599e4ddc11ee825c548e8749e0d55b8b3bce6e5da5d252d865b8a96fe49cd0cfafd3806cd13b39271e8951eac5dc7f13237f69ae5d0cc2bf87078871b7c46800f4569f6b0aaf831607416881a42e0658458100e8c1ec9679603aff5ce2430aa239cc8d9eace020ab946a0b348228e700be566ea993e4521bd40e2c2b977742f7e1fd8310a123c1ce051519181bc289788275bdee6849aa2130af46d6e25043409badeaa8637d0b8d4a782813dfa899b7da9c15646e93e878bee929ca9ad90e89e0716f7efce2c2b58004762c988345118f27459402c2cd1e9d7c5beb769f9cd6e769d74b48bde47b5b570708f9bd7f6de93fa013bbbfdf98055491b2a66c567e620f68fb99307855982fea1e85e4f42a04577d85db72504efd7240d6354ac81343d89220e94e9130ba8a3bb38e43bca536e21b7923475394af35c63cb43c5409bb670d488da8b50c15f9234a78bc073d40b28c1c8dfadf5dba4cd4f70048e5f154268add7f31e45ac1df69c3286ebd70a031302a76a6f28bd98f62df6f58319c9674159aeb924f3fafa6de32880d1a75cfd6b8205c444562fdf748aa1f8802aa4b77bb59f5b50f1937097f0a52885915f98bb0b97fa31dc71d555604110a196f26f25dece74f467dd6a4142d77e35f18a8922cb82358de5eaf72230e91cd975dd85e087d084540bd5cb68d59a3229cacabc7a3c6811b768adf35926ab7d17bd9e595c57c8ff72249bba49d67191e36ca3dc6ffff7f956461c175c23ed17144b96ec75fd28a79398e085cc67d03d717bbb02810c7cf2b7315279ed30e19e8643b30d3bd224ceabe820b6bf6e9c80749a981a05f59ae23531ae161aa11f744bc60db8e8e9dfb105733dc4196c5cc5bc411cfb28430bfd21a5a137b4f5e60092e6d44309e0155bfce01053b6a28bbde7b650c001272a7ae51c637281885f6f00e1ecc6f31b2dfdf5a4cb45688fcd825e0583b4c607d369c3e7f542656615d6d3a82e2772a5da9a04eb2312889e82d080ac7c5959be1c1395b1a8c02dfab94caeb41162bb2ddebf516e363b89a4ed12b4619c3963c60c6b276715c939d6fa9f663385a867007338ca8c0f307596203419956660afa3410687fd122d56f38301798173bad35ece2324ae46637925ab22682c3e0b45b62955787d6fa64383d0ca0bdff2597635975b3a6de6c2e97dccb995", 0x1000, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$pptp(r0, &(0x7f0000001200)={0x18, 0x2, {0x2, @private=0xa010101}}, 0x1e) syz_emit_ethernet(0x43, &(0x7f0000001240)={@random="9146a005b6f4", @remote, @val={@val={0x88a8, 0x7, 0x1}, {0x8100, 0x2, 0x0, 0x2}}, {@llc_tr={0x11, {@llc={0x6, 0x4e, "7cf5", "1420e3d5ed1587bcfbdaf3d0499894d9935ce17347eb629efbf2af6f05ecdf98ec00adddac42291a0f"}}}}}, &(0x7f00000012c0)={0x0, 0x1, [0x2bf, 0x29a, 0xab0, 0xced]}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001300)={0x0, 0x4, 0x7ff, 0x10001}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001380), r0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000013c0)={'veth0_macvtap\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0xa4, r3, 0x300, 0x70bd2c, 0xffffa0a4, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9d2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x800, 0x6) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000026c0)={0x18, 0x4, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x80000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f00000015c0)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000001600)=""/4096, 0x41000, 0xc, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002600)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000002640)={0x0, 0xc, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002680)=[0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0xccc5}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002780)={&(0x7f0000001540)='ext4_ext_convert_to_initialized_enter\x00', r6}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000027c0)=0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r7, 0x8982, &(0x7f0000002800)) vmsplice(r0, &(0x7f0000002e00)=[{&(0x7f0000002840)="9599a7bbe864663b771c5038ca0954fe3fcdbba21c3bfe28fba09ee6934f04d960a957b224a7505af5586192edb1b7107a5c90cff08e6ebbac6f7c1ab41c55493edbd5ffd162b0d4a21757f6d85bc113538e6a9718717181051867c19c993d922cc9ebc9b56f2a1e804b87b5862a671aeb0f59acf0b34fff4c6e1908fcde1bbc21d261adf5afe3f95b320268ad2c4d3d39a98d7dcb94207e68d1ecee7d4c6267ac026ced7d38f744d9cc601dbacdea32987d83770060c9f318ed35722a6eb4fbe5b79c5094019baee4f1477d99b94b5f4d0e24b4250454827032da7d578694d43a6012f967", 0xe5}, {&(0x7f0000002940)="d0b4e8e91dbb5a6baaf61ab3aef1a42673f7d90ad40bba6eae5c0998f781ea351e5527d097880ff0210b6e331b4ee25acb403bbafa3dbe51921b20befc07d29b9bb1cf0b1c7ac9c16ff870f5120a98de30f4c0cf923be24c737f4e301f8e8cde2bdcdc18384c6cfc031fa16e7fb8e4d18ac657cd03022ed74d1059a713d4ab7c96eaf6ea1ff90440bfcbcdaf45224ffbc3175e459b4e0c2fd126a306a763735cdd6c3086ee403018f934a317801e10d13742c19b673d669c283cbd15a43adb86ddb22c7e9c646388fdfb2ce70dea3c5e0a9d307503850d3461a7fef96ee7954909fe8cb7d30fe4cc7d942d", 0xeb}, {&(0x7f0000002a40)="1c19b151f95f8f758d64362318edc89fe1e7f0467ab87b56df2612b62457eea0c7bdf65912adc5aaea428be072e335f0ebfe45aba3e8718618f62c49f6765e09f9469f549f1d3395953580da4dfb54e08a0f5dd3977debe8efde2010cad6a9b1aef8e2ccf0a2e1e215ef360991a74c5ffd0dfe4d942df387d375b35245491762ac306ad2e33ec582320296abda89d2e5f35beddafe21d657016ea409b276e311fda61c34d0893923d264ea177df157957c455425aa4cf7525f868b62f59395161e20", 0xc2}, {&(0x7f0000002b40)="e5a2448a6ef4ce34747930f3b3e98f3899f72951ba2a93d4d58616bbe09f4473c818d9f69051e8c5e2563808bdaa9252b7a06b9ff943bb53efadbee6e2b722078895efcb069fdf4223ca51bb774cb4baa78bddb3c60ec3a1e482e91d49b9dc35f705debd8c287fa4a18fe5e4a08a5776cc7bb0dd83c00f577344ffe304ec7a1dcd572681feaec9", 0x87}, {&(0x7f0000002c00)="f9b8dd37e7d239d77ff4e244a48e7200a862fa413751ef0480bd2a3e320a315a219d7eadcab50e5d3b4dc0e651bc3f98f1857005d8586838adf582d2bceb3cca0197ca8692a27bc7d472530e04def6d7b53fbf9c2995f95e95a89489c5c8af7eb6ad9858ec40ec0402e5425d5a0c90fbf074ac3a14f43c88", 0x78}, {&(0x7f0000002c80)="05d992152222f44afca873bf320f408e8e963db32c5d027d79405c3c9c26019fca843ae7aa329251ca952f93c21c1ab65b1e980a05a633ccd508d7ed05ad9a711fe7c2fb52201ac34ee8a9f6c9c608c53a42f6c241da22f3b90d4f22e5f279dc03cbd9461e5d6ffafbe65ad15c6966ba885466b28bcc44ef3ebbcd795188e43f2abe08c65ad948ed037832f1dd3bf3fe93dbe4074e9412692f314661ae65e42a065d925711e1905241bcf0cc46e3a6cfe06389f8d122df93d7bf787bb8477ed9a05935f22f84efca1ca9c0c9ee51a422cbc9", 0xd2}, {&(0x7f0000002d80)="c447371f26b0d6105c0af22e5b0033d662c49d9334a680e14e74c9a5549b72612caf8f65488f21cf19f21c4bee0159eff9fe73face42e8c35b5052244a23a977ce525f1ce0e7", 0x46}], 0x7, 0x4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(r8, &(0x7f0000004440)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004400)={&(0x7f0000002ec0)={{0x14}, [@NFT_MSG_DELTABLE={0x38, 0x2, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x18, 0xe, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x54, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x3e8, 0x8, 0xa, 0xb03, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x8ad}, @NFTA_RULE_EXPRESSIONS={0x3c4, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffff7d33}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x388, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x37c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_DATA={0x290, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb6, 0x1, "074cde2e446d4dd67628a9c04b92ef2b08a36f02718fc50955d63b583c641d605ff7597e781b7f63a110bd7900d69f0409e8b901cb8ee96e7cd5d497408a7bfdc56c6d0bbec4b83e2fbfc7ed5f72af2a263089490f5f11bff823b53791e622a60124b7c8de7c10d5f5fdf1bf265239008c54772b5452e26de32ed16ca3405568d0b065530eed3b2f45ac2914e0e16c8a9fc2c5b06a8ea76e591685a858197292821dd2960f34dbf67a32a3fa5d1f3a3e86ad"}, @NFTA_DATA_VALUE={0xe0, 0x1, "a9ec4258cdb2f246b8ffa2966b0a18a6e67bdc4b355a8976738bc06e520f3d06d77308e38da58436a47a2be8563d5fb723cd60335804de8928f6dfce7f39fa315c832210a36bcc65d81d76cad5646d531b2cb2e0bb0388e50a7fae11c2e201f47ff323c8b9f26b9eb1a3c3d8b90610cad72fe62bf9bd51a652de4c29bfdd4ea536b78b148b72188622dfb7053c1ec2e601ea8d458a7518877fb714b457f6715cad0860274a39b0bd6a96e0fcf46259c962465a732125701028929725adcffd39d074aba643660e391198563f0cfd93754bb82d81c5ae4bb486b98937"}, @NFTA_DATA_VALUE={0xf1, 0x1, "ed3e550f0cb6b91676bb5b6fff76bdde1c9f860edcdc7cd1a9c5c2a5ff1ade72fe1ceb70a81683bf24230b941d8dc90e41ee9bcc537165aa5e2aed7049673da349dc276eb78f4b57b06b6ff188f00187f9ff768c4fe190bfd11745731638252bfbfb7dcd6ee2d57b2d5a6438171c406c0b10bbb304a557987925d8891c8d2e348baaa594e3dffef7f070daff152060f0209b9c60329d3b782be64555deef29b198f20c0fec7943399a29d29f1487a49de3288e912d5615b573b760b8018679d20d70137f271fd45ee65821a4cde78457c8acba3965b861d999528bba6caea09d9f97d83f86cf0782110f402d32"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_DATA={0xa8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFT_MSG_NEWSET={0x1024, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fib={{0x8}, @void}}, @NFTA_SET_USERDATA={0x1004, 0xd, 0x1, 0x0, "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"}]}], {0x14}}, 0x1514}, 0x1, 0x0, 0x0, 0x400c4}, 0x20000041) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000004540)={'gretap0\x00', &(0x7f0000004480)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x3, 0x9, {{0x19, 0x4, 0x1, 0x0, 0x64, 0x66, 0x0, 0xc4, 0x29, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x18, 0x0, [{0x0, 0x12, "0c46f4ac3af72ebf90b092499f6f913f"}]}, @timestamp_addr={0x44, 0x14, 0xbe, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x4762}, {@empty}]}, @timestamp_prespec={0x44, 0x24, 0x98, 0x3, 0x9, [{@broadcast, 0xfffffffb}, {@loopback, 0x4}, {@loopback, 0xfffffff8}, {@local, 0x3}]}]}}}}}) sendmsg$can_j1939(r0, &(0x7f0000005600)={&(0x7f0000004580)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x2}, 0xfd}, 0x18, &(0x7f00000055c0)={&(0x7f00000045c0)="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", 0x1000}, 0x1, 0x0, 0x0, 0x30004000}, 0x20000002) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000005640)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e24, 0x3, @local, 0xf}], 0x3c) readv(r2, &(0x7f0000006880)=[{&(0x7f0000005680)=""/90, 0x5a}, {&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000006700)=""/221, 0xdd}, {&(0x7f0000006800)=""/73, 0x49}], 0x4) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000068c0)=@netrom={'nr', 0x0}, 0x10) 2.527758622s ago: executing program 4 (id=1781): socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20048804) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast1}}}, 0x90) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) socket(0x18, 0x0, 0xc18895e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)=@newtaction={0x6c, 0x30, 0x83d79f1e8021ba05, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000}, @rand_addr, @multicast2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000111401010080000000000000080003000100040008004ac0"], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mem_connect\x00', r3}, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) 2.169851519s ago: executing program 0 (id=1782): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x2df) write$binfmt_elf64(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x2, 0xdb, 0x4, 0x7, 0x2, 0x6, 0x7, 0x308, 0x40, 0xbc, 0xfffffffd, 0x7, 0x38, 0x1, 0x8, 0x5, 0x7}, [{0x4, 0x6, 0x8, 0x3, 0x2, 0xfffffffffffffff5, 0x5}], "207c9120092b810aadd7e63d75b380269f5c55aeefe60b6844576c2a9e4cdf3b0846a7e05116f5bb955af1e7b24c737df06db832e164109e1d2c518aa37271037b40f2a328b6770eef97f87c71aa1c1c121335318660f3cabe9598d8c370ce4c51c1fa92a4a5b1b68274cd0259359b11df221393f89884367af92dab50c70866d79da04d482305fdeeef187ec4396a6da4509cd5195b7581b97599ac1f7fa523fab9b492", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x61c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0x0, 0x0, 0x0) 1.204045328s ago: executing program 0 (id=1783): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno\x00', 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet6_int(r2, 0x29, 0x49, 0x0, &(0x7f00000006c0)) (async) getsockopt$inet6_int(r2, 0x29, 0x49, 0x0, &(0x7f00000006c0)) close(r1) (async) close(r1) socket$netlink(0x10, 0x3, 0xe) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, r5, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @void, @void, @void, @void, @val={0x72, 0x6}}}]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, r5, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @void, @void, @void, @void, @val={0x72, 0x6}}}]}, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='Q\n\x00\x00', @ANYRES16, @ANYBLOB="050200000000000000002e00000008000300", @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000008a606672"], 0x24}}, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x26, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0x24, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100f5df0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.203454495s ago: executing program 4 (id=1784): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x80}}]}, 0x2c}}, 0x0) 1.160065364s ago: executing program 1 (id=1785): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x4, @vifc_lcl_ifindex=r0, @multicast2}, 0x10) r1 = socket$kcm(0x29, 0x7, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000080)) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001280)=@bpf_lsm={0x1d, 0x9, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x29}, @generic={0x0, 0xb, 0xc, 0x7, 0x80}, @generic={0x9, 0x1, 0x1, 0x0, 0x85}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0x6, 0x0, 0x10, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0xd, 0x0, 0x9, 0x4, 0xfffffffffffffff0}], &(0x7f0000000140)='GPL\x00', 0x8e, 0x1000, &(0x7f0000000180)=""/4096, 0x41100, 0x48, '\x00', r0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000011c0)={0x5, 0x8, 0x4, 0x8001}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001200)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001240)=[{0x2, 0x1, 0x1, 0x4}], 0x10, 0x1}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001340)={0x0, r2}, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001380)={0x0, 0x4, 0x200, 0x4a12}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000013c0)={r3, 0x0, 0x7, 0x1}) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x54, 0xb, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x200008a1) write$binfmt_script(r2, &(0x7f0000001540)={'#! ', './file0', [{0x20, 'syz1\x00'}], 0xa, "b8b15fc4c4532aea9048e593a1ede044df862871502a65df587c7b8f4d830d87dd7d8752ff9e1e1126aefd6e737f763dd344e8539f3e13b3119e8b4f83f2d23ade8ea6ed6227469e528cb1e4a42b5c31a3660732841218b64a14ea3d055a1d7b5bece6e8b2a0ca19a7fd1f9dc7775c0e5a591b8ff43d3c49da381eea2c91ef0933377ff6cd3cbe4b0d1a86e0daae8aa2e427af6d8c95fae4915f4ee5a5da15e61b49dadb359e33acccdc549de3382adb25c2e18de1328e817f2fe1ac3f79299680a2adf5e45772c858a9469ebcd60ceee6956d9197297292a17060"}, 0xec) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x18, 0x1409, 0x800, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001800)={r4, &(0x7f0000001740)="fb125da320793278c0139830967bf54910abf29c1c7647394d39a093febbf3f4503bf1f60655800492c7e57b72922ba2d3afd43aed4475a02022aee3871d7c1eb06b709e777a659b3f391345801bbbf080", &(0x7f00000017c0)=@tcp6=r5, 0x1}, 0x20) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001880)=@generic={&(0x7f0000001840)='./file0\x00'}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000018c0)={r6, 0xffffffffffffffff}, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) pwritev(r8, &(0x7f0000001d40)=[{&(0x7f0000001900)="7f3d15928dda6b38c35f08c945b4d4000014c1ff95c91de3a53506be95800216eeb617ff00d8a67a6f0f811fb92efd96250b3c0ba2ed8d2ecde3f669f6c42b4d149f6779404e9e1c8866808b80d355ac99c00462bac2f0952c42e8b6a46b8ea129c47ccab0c2727614832af43d07644754f75f80bf80e1b5d9d26f3d3e6e9accb7584723a44cd61858447a80651d882e2a4dc8dc50c5dc798ed8d6749ecabf9e9269adb2b19d9019a3e55e3690756c9a802f96c156e1b23139b5f18ba9ce9c7dbcebb9427627cd8855274993fe0eedfdd59b2bfabd2184014219c78c12e49f2de29e7d448b8db26bbc", 0xe9}, {&(0x7f0000001a00)="dd4893e86ec838ad1556265a1b86ab3dfea5096c7656cdf070bf0a0d95194784ec5366323494285398e8f7e694b045", 0x2f}, {&(0x7f0000001a40)="7feea8fd335fc70c252c3efe5195b2d3bd4bf127d5022c92c7b0aea68f78edf5ed48a440911ce551783012f59364f58bbe0fdf73ed4c1f1b648438d2415bc01f0702797515a146f2eccbbbef237697d7f90f2158a5290929eb09f6b73020d994792ca0fd3dfe3c968dcf9c6e4001d567e12d6e28b9ad6a2b39b013407c3783bff5181e71d247235b3a812a5a173840ff8c2e2b4e37db0d685604f2c7cc8d82ee701da937a0b732ec0df66b94c9f28a1dd2f4b9fb7470228905dd22b4d2ddd6a2923ff9e7f9cf1b3653fcc255b2f8228dd9e93d8d901a6001d4ebb9f6c3952d983c8839a9ba", 0xe5}, {&(0x7f0000001b40)="d62aede26b26af90d1ab40262b08ddb434ab2eb8c82a0b0ad085e29f04c6ca124d9326cec38b7196a1706e7e16419bf5f50245193c5b15e830e7f84fb939564ccfbfb5fe410d3bbb1ab764af0b24cbc0432b6f645dd4b271753e4df4067a268a5428e3419b8610941f0716", 0x6b}, {&(0x7f0000001bc0)="6a63d69201c1adb8f799eee7c63957a601b0a45b1878d7e94ed62a9f37dc08dfebcac55ab293d736c501b5f5ccd5a2f9fc0848c21794cbfd0bd96c8ed922d48d0a13f066c31311bba3cfa1b5f3a818e79d80de6b871cbc0a94e636c41408b7603714a2e6c9dbd2076125e98a4c001f18bdf8a25e229d3537fa5fd1bd8cc1c34994f7afe2d599c950c3e12c6b53eb3f42b7f11b78d0172c530a9932bdb7cf6b1010659c0fdfde6e15f54c", 0xaa}, {&(0x7f0000001c80)="f968a12faa3d8ad3774bc638f907a5200e9ac1e74e1490aced5ad66f11c4830febc2a1cf4d61b225474819a4a8d09fb031fcce907ca7ea45603b40b24528910d329f7be4d6ced945b7e84a2718a3a9d375479f631e71e8d92932166c8f83c8044a9b3db78f8f15905257608bb4e5df0f9c3b8338c9605201a7f0c4df3c1ecfdfc8f9ee3163fbd85045f7cdc284109469ba22c115618d", 0x96}], 0x6, 0xc56, 0x4000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001dc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001e00)={'team0\x00', 0x0}) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x30, r4, 0x180000000) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000001e40)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)=@ipv6_newaddrlabel={0x38, 0x48, 0x2, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x40, 0x0, r11, 0x7fff}, [@IFAL_LABEL={0x8, 0x2, 0xe88a866a43122ebb}, @IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)=@ipv4_newaddr={0x38, 0x14, 0x100, 0x70bd2b, 0x25dfdbfc, {0x2, 0x40, 0xa, 0xfd, r0}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000801}, 0x40000000) recvmmsg(r4, &(0x7f0000006240)=[{{&(0x7f0000002080)=@qipcrtr, 0x80, &(0x7f0000002500)=[{&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/255, 0xff}, {&(0x7f0000002300)=""/100, 0x64}, {&(0x7f0000002380)=""/121, 0x79}, {&(0x7f0000002400)=""/251, 0xfb}], 0x5, &(0x7f0000002580)=""/120, 0x78}, 0x400}, {{&(0x7f0000002600)=@alg, 0x80, &(0x7f00000037c0)=[{&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/199, 0xc7}, {&(0x7f0000003780)=""/39, 0x27}], 0x3, &(0x7f0000003800)=""/171, 0xab}, 0xb3}, {{&(0x7f00000038c0)=@phonet, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003940)=""/30, 0x1e}, {&(0x7f0000003980)=""/176, 0xb0}, {&(0x7f0000003a40)=""/95, 0x5f}, {&(0x7f0000003ac0)=""/78, 0x4e}, {&(0x7f0000003b40)=""/226, 0xe2}, {&(0x7f0000003c40)=""/191, 0xbf}, {&(0x7f0000003d00)=""/51, 0x33}, {&(0x7f0000003d40)=""/231, 0xe7}], 0x8, &(0x7f0000003ec0)=""/232, 0xe8}, 0x6}, {{&(0x7f0000003fc0)=@nfc_llcp, 0x80, &(0x7f00000050c0)=[{&(0x7f0000004040)=""/16, 0x10}, {&(0x7f0000004080)=""/31, 0x1f}, {&(0x7f00000040c0)=""/4096, 0x1000}], 0x3, &(0x7f0000005100)=""/116, 0x74}, 0xcd1}, {{&(0x7f0000005180)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000006200)=[{&(0x7f0000005200)=""/4096, 0x1000}], 0x1}, 0x3c5d}], 0x5, 0x20, &(0x7f0000006380)={0x0, 0x989680}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000006480)={'syztnl0\x00', &(0x7f00000063c0)={'syztnl2\x00', r11, 0x1, 0x20, 0x0, 0xffff96cb, {{0x26, 0x4, 0x0, 0x31, 0x98, 0x65, 0x0, 0x4, 0x29, 0x0, @private=0xa010100, @loopback, {[@timestamp_addr={0x44, 0x3c, 0xe1, 0x1, 0xa, [{@multicast1, 0x5}, {@multicast1, 0x81}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x8}, {@private=0xa010101, 0xfffffff9}, {@multicast1, 0x9}, {@local, 0x8}, {@multicast2, 0x31}]}, @ssrr={0x89, 0x13, 0xcd, [@broadcast, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @timestamp={0x44, 0x24, 0xba, 0x0, 0x9, [0x6a5f, 0x7f, 0xff, 0x0, 0x6, 0x358, 0x40000, 0x5]}, @generic={0xebacfbd1c0803a7d, 0x10, "80fe7853ea62104239f09b97ea1d"}]}}}}}) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000064c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, r6, 0x0, '\x00', 0x0, r4, 0x3, 0x2, 0x4}, 0x48) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000006540)={0xffffffffffffffff, 0x4, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000007800)={0x11, 0x1e, &(0x7f0000006580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0xa1}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x249}, @cb_func={0x18, 0x5f69bce801174dcb, 0x4, 0x0, 0xfffffffffffffffd}, @map_fd={0x18, 0x6, 0x1, 0x0, r13}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @generic={0x7f, 0x7, 0x3, 0x3e, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000006680)='syzkaller\x00', 0x7fffffff, 0x1000, &(0x7f00000066c0)=""/4096, 0x40f00, 0x88, '\x00', r9, 0x0, r4, 0x8, &(0x7f00000076c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000007700)={0x5, 0xe, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000007740)=[r4, r7, r4], &(0x7f0000007780)=[{0x4, 0x3, 0xf, 0x7}, {0x1, 0x4, 0xb, 0xb}, {0x3, 0x3, 0x3, 0x8}, {0x3, 0x5, 0x8, 0x3}, {0x2, 0x3, 0x6, 0x1}, {0x1, 0x3, 0x5, 0x9}, {0x0, 0x2, 0x7, 0x3}], 0x10, 0x6}, 0x90) 1.115900157s ago: executing program 4 (id=1786): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x1}, 0xfd}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x2c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="080008000104"], 0xfdef) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000006c0)='\v', 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYRES64=r5], 0x40}}, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={0x0, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e20, @broadcast}, 0x40, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)='netdevsim0\x00', 0x2, 0x80000000, 0x1080}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000000)) r10 = socket$inet(0x2, 0x3, 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r10, 0x5411, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r9, 0x4008744b, &(0x7f00000000c0)={0x281}) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000007cd7015c3db60c344c993b696976b19fabc17845ca3d4357f3f2b311ee21e28fd0738e2e15d4b8b08cb16341dd6c915988b13eafb4a5d978b2fa4b6b5c7c1cee359dbe3d7072ceba81f75bc99b965c3fe71e02cf56d5035ca2a296c070b2b04360ebb8a7c840e5101c7436b28353d94d2df7029cf6f1315aeeedbec2dffeacb23ec03a7a53", @ANYRES16=r12, @ANYBLOB="59cf0000000000000000080000001400018006000100000000000800050000000000"], 0x28}}, 0x0) shutdown(r11, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90830809}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0xcc, r12, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0xcc}, 0x1, 0x0, 0x0, 0x844}, 0x4008040) r13 = accept$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @null}, [@bcast, @rose, @remote, @default, @default, @bcast, @default, @null]}, &(0x7f0000000300)=0x48) ioctl$SIOCAX25ADDFWD(r13, 0x89ea, &(0x7f0000000340)={@bcast, @null}) 955.793324ms ago: executing program 1 (id=1787): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000340)=0xffffffd9, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0x0, @private2}, @in6={0xa, 0x4e21, 0x0, @loopback}], 0x38) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xa, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9f}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r4 = socket$rds(0x15, 0x5, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_MASK={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "66cf7a5dc0f345986d48acbd9420bd9b9f"}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b40)=@newqdisc={0x524, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4f4, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8}, @TCA_GRED_STAB={0x104, 0x2, "6f9c29745866749223f963f886722428930e39ec6ac30ee16c2c9d0768da8b274a8c33af0a3fc41551ab9e1d7c50ee8a7137d1c05b5299d86f52072fb08316fc155ee2334f6620cf89aa68eef43d1213c663705c51a341c8fca89f17defc32d1f0b6457e5a7f9704ff001c7f21bdaf5545d5270ed517a9de7ae6e124d5b471a188d954ba5f93be27f7e90360c07065cb07d9b690ecbf7eb0fbd8563bc50e3a7ae1778cb68ac34610c514bd046909d2ed4de92b06cb359486b946ef967ac20f4d25534f239693d0cb733b40ae226f001cf8b81b8fc4d8c5eb8a27631c82a01c43ff285ff1273bf76c37732624d2a8cbc061554fd533bde21659cc686b2ede7517"}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_DPS={0x10}, @TCA_GRED_LIMIT={0x8}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8}, @TCA_GRED_MAX_P={0x8, 0x4, 0x80000000}, @TCA_GRED_LIMIT={0x8}, @TCA_GRED_PARMS={0x38}, @TCA_GRED_PARMS={0x38, 0x1, {0x7, 0x8001, 0x800000, 0xd, 0xffffffff, 0xfffffe01, 0x8, 0x3, 0x400, 0x5, 0x11, 0x1b, 0x13, 0x0, 0x76, 0x9}}]}}]}, 0x524}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007400)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90624fc600d000300040003", 0x1b}], 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r8, 0x8b30, &(0x7f0000000040)) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newchain={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2}, {0x4, 0xfff1}, {0x0, 0xa}}}, 0x24}}, 0x0) 955.419047ms ago: executing program 0 (id=1788): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000440000002000128008000100767469001400028008000500e000000208000100", @ANYRESOCT], 0x40}, 0x1, 0xba01}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000028000180248002800800040059000000080002000300000008000200080000000800040003000000"], 0x3c}}, 0x40000) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000180)=""/251, &(0x7f0000000080)=0xfb) 793.03121ms ago: executing program 1 (id=1789): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000000ff6010400000000000000001e000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006970766c616e310000000000000000000500110002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40002}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x15, 0x2, 0x6) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={@local, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x69, 0x6, 0xf000, 0x500, 0xfffffffffffffff7, 0x104200000, r5}) socket$netlink(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "af", "dd"}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)={@map, 0xffffffffffffffff, 0x17, 0x0, 0x0, @prog_id}, 0x20) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000777099a000000f47117f03b14d284132fa896632a30e502fad27bf2d13d03b4d733"], 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8}]}], {0x14, 0x10}}, 0x78}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000000090", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00"], 0x48}}, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000bec0)={0x0, 0x0, &(0x7f000000be80)={&(0x7f000000b180)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x104}}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x54, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {0x4}}]}]}, 0x54}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 790.717006ms ago: executing program 0 (id=1790): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x3, {0xa, 0x4e21, 0x6, @remote, 0x2}}}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x18}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x16}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x3, 0x80005, 0x1) r3 = socket(0x15, 0x5, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt(r3, 0x200000000114, 0x2715, 0x0, 0x0) (async) getsockopt(r3, 0x200000000114, 0x2715, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000001280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8001) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x80) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x16) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x16) unshare(0x22020600) (async) unshare(0x22020600) sendfile(r4, r5, 0x0, 0x8000002b) r6 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff20, &(0x7f00000004c0)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 553.200179ms ago: executing program 1 (id=1791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000001238000000060a01030000000000000000020000000900020073797a32400000000900010073797a30000000000c0003400000000000000002140000001100010000000000000000000000000a"], 0x60}}, 0x4800) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) clock_gettime(0x4c25726cb16dd79b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r4, 0x1, 0x0, 0x0, {{0x38}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x28}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, &(0x7f0000000580)={r11, @in={{0x2, 0x4e21, @remote}}}, 0x84) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x12, r2, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x10, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {0x3, 0x0}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x4, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x94}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) 551.745147ms ago: executing program 4 (id=1792): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="fba7000000002bd4000004"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x80000001, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0xffffffff}, 0x48) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x39000, 0x0) (async, rerun: 64) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x7ea) (async, rerun: 64) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x1f) (async, rerun: 32) socket$kcm(0x21, 0x2, 0x2) (async, rerun: 32) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x2, 0x15, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}]}, 0x1b}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x0, 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008001c000000002018000180140002006e657464657673696d300000000000000800080000000000080009"], 0x44}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r8) sendmsg$DEVLINK_CMD_TRAP_GET(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x86}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x220, r9, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r10, 0x431, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x34}}, 0x0) 359.838595ms ago: executing program 4 (id=1793): socket$kcm(0xa, 0x1, 0x106) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$alg(0xffffffffffffffff, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)}], 0x1, 0x0, 0x0, 0x20040090}, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)="0683db42917432475e", 0x9}, {&(0x7f0000000540)="3a7df4271d810bbfe75ff3c934b36ea9bbdaf502b38bd77110c02d4e8f49a80754d2fe7eb408faf818cf7118e019d680b341fe9e31783db61ad45b153e768f935fe50fc844af0b", 0x47}], 0x2}, 0x20004000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0xf0400000, 0x0, 0x0, 0xfffffffe, 0x2007}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r6, 0x2}, 0x18) syz_emit_ethernet(0x54, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x1e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20005810) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x30044041) close(0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) read(r8, &(0x7f0000000000)=""/66, 0x42) sendmmsg(r8, &(0x7f000000c080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000010000000000000000000000911209000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 195.719392ms ago: executing program 1 (id=1794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110b9000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x558, 0x0, 0x0, 0x1a8, 0x3d8, 0x1a8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x7ff, 0x8000, 0xa, 0x7, 0xc, 0xb, 0x6, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r2, 0x4}, &(0x7f00000000c0)=0x8) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x154, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0xfffffffc}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000006c0)={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, 0x2, 0x5, 0x94, 0x400, 0x5, 0x200, r5}) r7 = socket(0x25, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1a0000004a00010000010000000000000a"], 0x1c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 108.581635ms ago: executing program 0 (id=1795): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @broadcast}, &(0x7f0000000100)=0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, r5, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @void, @void, @void, @void, @val={0x72, 0x6}}}]}, 0x40}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 0s ago: executing program 1 (id=1796): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000004000000000000000000850000000700000018", @ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="10000180040004800800010000", @ANYBLOB='.'], 0x28}, 0x1, 0x1000000000000000}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000ffffffffffffff7f2e800c0004000000000000000000010006000100000001000000"], 0x30}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'macvtap0\x00', 0x1000}) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xfffffffe, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0xfd, 0xd}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) kernel console output (not intermixed with test programs): ] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.808510][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 289.821703][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 289.831414][ T5960] bridge_slave_0: left allmulticast mode [ 289.837975][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 289.846366][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 289.849963][ T5960] bridge_slave_0: left promiscuous mode [ 289.862492][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 289.875323][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 289.909845][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.635164][ T5960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.649632][ T5960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.660507][ T5960] bond0 (unregistering): Released all slaves [ 290.869020][T10009] syzkaller0: entered promiscuous mode [ 290.888446][T10009] syzkaller0: entered allmulticast mode [ 290.922721][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'. [ 291.175220][T10037] net_ratelimit: 14 callbacks suppressed [ 291.175239][T10037] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 291.514868][T10049] netlink: 'syz.0.1090': attribute type 11 has an invalid length. [ 291.733238][T10057] ebtables: ebtables: counters copy to user failed while replacing table [ 291.995512][ T5235] Bluetooth: hci1: command tx timeout [ 293.126345][T10065] __nla_validate_parse: 4 callbacks suppressed [ 293.126364][T10065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1094'. [ 293.208302][T10057] tipc: Started in network mode [ 293.213218][T10057] tipc: Node identity ac1414aa, cluster identity 4711 [ 293.242574][T10057] tipc: Enabled bearer , priority 10 [ 293.447865][ T5960] hsr_slave_0: left promiscuous mode [ 293.480788][ T5960] hsr_slave_1: left promiscuous mode [ 293.534265][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.553258][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.616188][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.639324][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.699711][ T5960] veth1_macvtap: left promiscuous mode [ 293.710533][ T5960] veth0_macvtap: left promiscuous mode [ 293.721089][ T5960] veth1_vlan: left promiscuous mode [ 293.727549][ T5960] veth0_vlan: left promiscuous mode [ 294.073947][ T5235] Bluetooth: hci1: command tx timeout [ 294.238976][ T8] tipc: Node number set to 2886997162 [ 294.629638][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 294.675684][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 295.197856][T10107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1103'. [ 295.252115][T10117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1103'. [ 295.270458][T10114] syzkaller1: entered promiscuous mode [ 295.297899][T10114] syzkaller1: entered allmulticast mode [ 295.428820][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1105'. [ 295.442284][T10131] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 295.472180][T10132] netlink: 'syz.4.1106': attribute type 2 has an invalid length. [ 295.670512][ T9973] chnl_net:caif_netlink_parms(): no params data found [ 295.891927][ T9973] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.913969][ T9973] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.921187][ T9973] bridge_slave_0: entered allmulticast mode [ 295.942734][T10157] sock: sock_timestamping_bind_phc: sock not bind to device [ 295.951318][ T9973] bridge_slave_0: entered promiscuous mode [ 295.979170][ T9973] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.987163][ T9973] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.998022][ T9973] bridge_slave_1: entered allmulticast mode [ 296.008833][ T9973] bridge_slave_1: entered promiscuous mode [ 296.109263][ T9973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.130336][T10163] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.137743][T10163] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.154161][ T5235] Bluetooth: hci1: command tx timeout [ 296.375987][ T9973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.552265][ T9973] team0: Port device team_slave_0 added [ 296.572125][T10188] netlink: 'syz.2.1115': attribute type 10 has an invalid length. [ 296.598294][T10188] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.622357][T10188] bond0: (slave team0): Enslaving as an active interface with an up link [ 296.637794][T10189] netlink: 'syz.2.1115': attribute type 10 has an invalid length. [ 296.652216][T10189] bond0: (slave team0): Releasing backup interface [ 296.668444][T10189] bridge0: port 3(team0) entered blocking state [ 296.675931][T10189] bridge0: port 3(team0) entered disabled state [ 296.683151][T10189] team0: entered allmulticast mode [ 296.689503][T10189] team_slave_0: entered allmulticast mode [ 296.700882][T10189] team_slave_1: entered allmulticast mode [ 296.709130][T10189] team0: entered promiscuous mode [ 296.714761][T10189] team_slave_0: entered promiscuous mode [ 296.720640][T10189] team_slave_1: entered promiscuous mode [ 296.752977][ T9973] team0: Port device team_slave_1 added [ 296.771700][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1116'. [ 296.883375][ T9973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.899746][ T9973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.930960][ T9973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.974657][ T9973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.981631][ T9973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.038573][ T9973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.068807][T10202] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1118'. [ 297.089212][T10211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1118'. [ 297.178569][T10218] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1120'. [ 297.271207][T10215] batadv0: entered promiscuous mode [ 297.286061][T10215] batadv_slave_0: entered promiscuous mode [ 297.292337][T10215] batadv_slave_0: left promiscuous mode [ 297.310393][T10215] batadv0: left promiscuous mode [ 297.376204][T10224] netlink: 'syz.0.1121': attribute type 1 has an invalid length. [ 297.397287][ T9973] hsr_slave_0: entered promiscuous mode [ 297.414484][T10224] netlink: 'syz.0.1121': attribute type 2 has an invalid length. [ 297.422670][ T9973] hsr_slave_1: entered promiscuous mode [ 297.487941][T10231] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1121'. [ 297.729131][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1124'. [ 298.237173][ T5235] Bluetooth: hci1: command tx timeout [ 299.396391][T10249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1125'. [ 299.943411][T10275] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 299.963670][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'. [ 300.267156][T10304] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 300.287978][T10304] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 300.297049][T10304] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 300.830413][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'. [ 300.841321][T10338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1140'. [ 301.187500][ T9973] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 301.199715][T10347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.238860][ T9973] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 301.280760][ T9973] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 301.311981][ T9973] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 301.362863][T10358] netlink: 'syz.4.1146': attribute type 5 has an invalid length. [ 301.740965][ T9973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.838182][ T9973] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.902873][ T5377] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.910053][ T5377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.968424][ T5377] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.975636][ T5377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.991081][T10384] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 302.148560][T10390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1154'. [ 302.692652][ T9973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.835133][ T9973] veth0_vlan: entered promiscuous mode [ 302.880488][ T9973] veth1_vlan: entered promiscuous mode [ 302.990239][ T9973] veth0_macvtap: entered promiscuous mode [ 303.042448][ T9973] veth1_macvtap: entered promiscuous mode [ 303.101869][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.129783][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.140920][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.156599][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.170203][ T9973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.200423][T10427] tipc: Started in network mode [ 303.216943][T10427] tipc: Node identity 1ed2005b6268, cluster identity 4711 [ 303.225136][T10427] tipc: Enabled bearer , priority 0 [ 303.232108][T10430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1162'. [ 303.288928][T10423] ªªªªªª: renamed from syzkaller0 [ 303.299362][T10423] tipc: Disabling bearer [ 303.322236][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.348181][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.362913][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.378534][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.388453][ T9973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.403945][ T9973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.416974][ T9973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.450327][ T9973] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.466749][ T9973] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.484043][ T9973] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.517838][ T9973] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.348938][ T5376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.378160][ T5376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.472984][ T5377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.495101][ T5377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.716766][T10518] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.1175'. [ 304.743243][T10518] openvswitch: netlink: Actions may not be safe on all matching packets [ 304.911392][T10526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1178'. [ 305.252976][T10543] xt_l2tp: v2 tid > 0xffff: 150994944 [ 305.457623][T10550] netlink: 'syz.0.1183': attribute type 1 has an invalid length. [ 305.474784][T10553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1184'. [ 305.674015][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 305.980320][T10574] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 306.027349][T10584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1188'. [ 306.445240][T10605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1194'. [ 306.502591][T10613] netlink: 424 bytes leftover after parsing attributes in process `syz.0.1196'. [ 306.760574][ T5377] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.798182][T10617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.815511][T10617] batadv_slave_1: entered promiscuous mode [ 306.821360][T10617] batadv_slave_1: entered allmulticast mode [ 307.246353][ T5377] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.330429][ T5377] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.402461][ T5377] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.524360][ T5377] bridge_slave_1: left allmulticast mode [ 307.530047][ T5377] bridge_slave_1: left promiscuous mode [ 307.540242][ T5377] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.549063][ T5377] bridge_slave_0: left allmulticast mode [ 307.557039][ T5377] bridge_slave_0: left promiscuous mode [ 307.562742][ T5377] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.191531][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.210267][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.230290][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.240809][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.246671][ T5377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.264461][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 308.271899][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.272394][ T5377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.318419][ T5377] bond0 (unregistering): Released all slaves [ 308.767330][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1209'. [ 308.857908][T10711] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.1212'. [ 309.049521][T10728] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20003 [ 309.057995][T10723] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20003 [ 309.306635][T10723] tipc: Started in network mode [ 309.311621][T10723] tipc: Node identity ac1414aa, cluster identity 4711 [ 309.331958][T10723] tipc: Enabled bearer , priority 10 [ 309.440502][ T5377] hsr_slave_0: left promiscuous mode [ 309.492336][ T5377] hsr_slave_1: left promiscuous mode [ 309.503009][ T5377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.515446][ T5377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.527845][ T5377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.546124][ T5377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.610160][ T5377] veth1_macvtap: left promiscuous mode [ 309.631864][ T5377] veth0_macvtap: left promiscuous mode [ 309.637910][ T5377] veth1_vlan: left promiscuous mode [ 309.643447][ T5377] veth0_vlan: left promiscuous mode [ 310.169309][ T5377] team0 (unregistering): Port device team_slave_1 removed [ 310.211722][ T5377] team0 (unregistering): Port device team_slave_0 removed [ 310.314515][ T5235] Bluetooth: hci1: command tx timeout [ 310.463612][ T8] tipc: Node number set to 2886997162 [ 310.797470][T10678] chnl_net:caif_netlink_parms(): no params data found [ 310.977673][T10774] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1222'. [ 311.270241][T10678] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.313802][T10678] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.324494][T10678] bridge_slave_0: entered allmulticast mode [ 311.338435][T10678] bridge_slave_0: entered promiscuous mode [ 311.361191][T10678] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.370469][T10678] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.375934][T10803] sctp: [Deprecated]: syz.4.1228 (pid 10803) Use of int in maxseg socket option. [ 311.375934][T10803] Use struct sctp_assoc_value instead [ 311.389165][T10678] bridge_slave_1: entered allmulticast mode [ 311.394340][T10806] netlink: 'syz.2.1227': attribute type 1 has an invalid length. [ 311.402984][T10678] bridge_slave_1: entered promiscuous mode [ 311.430529][T10806] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1227'. [ 311.458758][T10806] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1227'. [ 311.512888][T10678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.532855][T10678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.671316][T10678] team0: Port device team_slave_0 added [ 311.709134][T10817] netlink: 'syz.2.1230': attribute type 1 has an invalid length. [ 311.722156][T10817] netlink: 9320 bytes leftover after parsing attributes in process `syz.2.1230'. [ 311.732297][T10817] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1230'. [ 311.747489][T10816] netlink: 'syz.4.1231': attribute type 21 has an invalid length. [ 311.760676][T10678] team0: Port device team_slave_1 added [ 311.767819][T10817] netlink: 'syz.2.1230': attribute type 1 has an invalid length. [ 311.894811][T10678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.910594][T10678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.942376][T10678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.958487][T10678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.998103][T10678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.042227][T10678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.226116][T10678] hsr_slave_0: entered promiscuous mode [ 312.260145][T10678] hsr_slave_1: entered promiscuous mode [ 312.393672][ T5235] Bluetooth: hci1: command tx timeout [ 312.591095][T10868] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1244'. [ 313.016247][T10888] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1249'. [ 313.195456][T10898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1252'. [ 313.263287][T10899] team0: left allmulticast mode [ 313.269810][T10899] team_slave_0: left allmulticast mode [ 313.278184][T10899] team_slave_1: left allmulticast mode [ 313.285594][T10899] team0: left promiscuous mode [ 313.290561][T10899] team_slave_0: left promiscuous mode [ 313.297996][T10899] team_slave_1: left promiscuous mode [ 313.304059][T10899] bridge0: port 3(team0) entered disabled state [ 313.318095][T10899] bridge_slave_0: left allmulticast mode [ 313.326386][T10899] bridge_slave_0: left promiscuous mode [ 313.347652][T10899] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.389739][T10899] bridge_slave_1: left allmulticast mode [ 313.413636][T10899] bridge_slave_1: left promiscuous mode [ 313.419444][T10899] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.433075][T10899] bond0: (slave bond_slave_0): Releasing backup interface [ 313.469607][T10899] bond0: (slave bond_slave_1): Releasing backup interface [ 313.520287][T10899] team0: Port device team_slave_0 removed [ 313.549053][T10899] team0: Port device team_slave_1 removed [ 313.568169][T10899] bond0: (slave batadv_slave_0): Releasing backup interface [ 313.594537][T10899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.601964][T10899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.638066][T10899] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 313.648346][T10899] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 313.670025][T10899] team0: Port device macvlan2 removed [ 313.856390][T10910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1256'. [ 313.876035][T10911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1255'. [ 314.052726][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.064187][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.072232][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.081252][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.089123][T10678] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.097714][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 314.105250][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.140119][T10678] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.148263][T10920] netlink: 'syz.4.1259': attribute type 3 has an invalid length. [ 314.173010][T10919] netlink: 'syz.0.1258': attribute type 1 has an invalid length. [ 314.187502][T10678] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.341798][T10678] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.474234][ T5235] Bluetooth: hci1: command tx timeout [ 314.673924][T10945] netlink: 'syz.4.1263': attribute type 1 has an invalid length. [ 314.890619][T10960] sctp: [Deprecated]: syz.4.1266 (pid 10960) Use of int in max_burst socket option deprecated. [ 314.890619][T10960] Use struct sctp_assoc_value instead [ 314.918308][T10964] xt_cgroup: invalid path, errno=-2 [ 314.949580][T10915] chnl_net:caif_netlink_parms(): no params data found [ 314.978314][T10678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.120728][T10678] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.269775][T10915] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.296695][T10915] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.307762][T10915] bridge_slave_0: entered allmulticast mode [ 315.320296][T10915] bridge_slave_0: entered promiscuous mode [ 315.338296][T10915] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.351070][T10915] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.361131][T10915] bridge_slave_1: entered allmulticast mode [ 315.383079][T10915] bridge_slave_1: entered promiscuous mode [ 315.486522][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.494002][ T5960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.527206][T10915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.570836][T10915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.658412][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.665641][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.682029][T11003] netlink: 'syz.0.1276': attribute type 8 has an invalid length. [ 315.751340][T10915] team0: Port device team_slave_0 added [ 315.787591][T10915] team0: Port device team_slave_1 added [ 315.834916][T11014] ebtables: ebtables: counters copy to user failed while replacing table [ 315.933318][T11014] bridge2: entered promiscuous mode [ 315.950469][T11014] bridge2: entered allmulticast mode [ 315.973716][T11014] team0: Port device bridge2 added [ 316.008459][T10915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.021252][T10915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.050205][T10915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.087864][T10915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.104839][T10915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.154132][ T5235] Bluetooth: hci3: command tx timeout [ 316.162147][T10915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.185342][T11024] netlink: 'syz.1.1280': attribute type 33 has an invalid length. [ 316.208994][T11031] __nla_validate_parse: 2 callbacks suppressed [ 316.209013][T11031] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1280'. [ 316.400923][T10915] hsr_slave_0: entered promiscuous mode [ 316.426092][T10915] hsr_slave_1: entered promiscuous mode [ 316.444298][T10915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.451895][T10915] Cannot create hsr debugfs directory [ 316.554594][ T5235] Bluetooth: hci1: command tx timeout [ 316.822299][T10915] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.068198][T10915] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.129974][T11079] netlink: 'syz.1.1288': attribute type 7 has an invalid length. [ 317.149675][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1290'. [ 317.177427][T11082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1290'. [ 317.234158][T11088] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1289'. [ 317.282870][T10915] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.308661][T11092] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.1291'. [ 317.343210][T10678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.448184][T10915] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.597227][T10678] veth0_vlan: entered promiscuous mode [ 317.643193][T10678] veth1_vlan: entered promiscuous mode [ 317.690025][T11108] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 317.851482][T10915] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 317.890168][T10915] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 317.907880][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1299'. [ 317.923660][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1299'. [ 317.932682][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'. [ 317.957872][T11120] veth1_macvtap: left promiscuous mode [ 317.963439][T11120] macsec0: entered promiscuous mode [ 317.969341][T11120] macsec0: entered allmulticast mode [ 317.989184][T10915] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 318.011673][T10678] veth0_macvtap: entered promiscuous mode [ 318.024142][T11115] veth1_macvtap: entered promiscuous mode [ 318.036108][T11115] veth1_macvtap: entered allmulticast mode [ 318.042572][T11115] macsec0: left promiscuous mode [ 318.052248][T11115] macsec0: left allmulticast mode [ 318.061755][T11115] veth1_macvtap: left allmulticast mode [ 318.075795][T10915] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 318.135599][T10678] veth1_macvtap: entered promiscuous mode [ 318.211860][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.223949][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.234184][ T5235] Bluetooth: hci3: command tx timeout [ 318.241180][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.253270][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.272026][T10678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.295125][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.310982][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.329169][T10678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.349285][T10678] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.370127][T10678] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.385507][T10678] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.396208][T10678] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.486083][T11143] pim6reg1: entered promiscuous mode [ 318.491428][T11143] pim6reg1: entered allmulticast mode [ 318.682268][ T5377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.704336][ T5377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.715377][T10915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.767923][T10915] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.772822][T11157] netlink: 'syz.1.1311': attribute type 32 has an invalid length. [ 318.786710][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.796576][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.803782][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.806730][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.825720][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.832873][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.058914][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1314'. [ 319.137834][T11176] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 319.221517][T11172] Bluetooth: MGMT ver 1.23 [ 319.351561][T10915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.401753][T10915] veth0_vlan: entered promiscuous mode [ 319.413211][T10915] veth1_vlan: entered promiscuous mode [ 319.451277][T10915] veth0_macvtap: entered promiscuous mode [ 319.461458][T10915] veth1_macvtap: entered promiscuous mode [ 319.493775][T10915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.511497][T10915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.530227][T10915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.543651][T10915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.555821][T10915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.566876][T10915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.578393][T10915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.596740][T10915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.608563][T10915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.619792][T10915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.630651][T10915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.643017][T10915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.658608][T10915] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.667786][T10915] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.677967][T10915] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.688668][T10915] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.771248][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.889632][ T2588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.915149][ T2588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.962245][ T5960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.971172][ T5960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.521931][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.885873][T11193] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1318'. [ 320.941581][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.115347][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.164829][T11198] lo: entered allmulticast mode [ 321.184873][T11198] lo: left allmulticast mode [ 321.415204][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.415718][T11222] netlink: 'syz.0.1325': attribute type 3 has an invalid length. [ 321.439511][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.449709][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.458814][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.469280][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 321.476808][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.509940][ T63] bridge_slave_1: left allmulticast mode [ 321.545712][ T63] bridge_slave_1: left promiscuous mode [ 321.583139][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.647917][ T63] bridge_slave_0: left allmulticast mode [ 321.657910][ T63] bridge_slave_0: left promiscuous mode [ 321.664150][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.744806][T11242] __nla_validate_parse: 3 callbacks suppressed [ 321.744825][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1329'. [ 322.390424][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.410111][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.422543][ T63] bond0 (unregistering): Released all slaves [ 322.446178][T11232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1329'. [ 322.470485][T11232] netlink: 'syz.4.1329': attribute type 25 has an invalid length. [ 322.521001][T11232] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.530422][T11232] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.539678][T11232] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.549400][T11232] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.572414][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 322.604454][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 322.612753][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 322.621174][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 322.629058][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 322.636738][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.139816][T11281] netlink: 'syz.4.1331': attribute type 2 has an invalid length. [ 323.186013][T11279] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1335'. [ 323.369688][ T63] hsr_slave_0: left promiscuous mode [ 323.407960][ T63] hsr_slave_1: left promiscuous mode [ 323.420382][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.434590][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.459434][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.477939][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.514636][ T5238] Bluetooth: hci1: command tx timeout [ 323.540691][ T63] veth1_macvtap: left promiscuous mode [ 323.548207][ T63] veth0_macvtap: left promiscuous mode [ 323.557318][ T63] veth1_vlan: left promiscuous mode [ 323.562697][ T63] veth0_vlan: left promiscuous mode [ 324.201780][ T63] team0 (unregistering): Port device team_slave_1 removed [ 324.247379][ T63] team0 (unregistering): Port device team_slave_0 removed [ 324.713976][ T5238] Bluetooth: hci3: command tx timeout [ 324.735616][T11286] geneve0: entered allmulticast mode [ 324.805241][T11316] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 324.922559][T11322] team_slave_1: entered promiscuous mode [ 324.955278][T11322] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 324.985132][T11321] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1342'. [ 325.010998][T11325] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1343'. [ 325.420903][T11219] chnl_net:caif_netlink_parms(): no params data found [ 325.512426][T11257] chnl_net:caif_netlink_parms(): no params data found [ 325.549638][T11354] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1346'. [ 325.594119][ T5238] Bluetooth: hci1: command tx timeout [ 325.714140][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1348'. [ 326.011381][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.178040][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.387320][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.419530][T11257] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.438181][T11257] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.450482][T11257] bridge_slave_0: entered allmulticast mode [ 326.458700][T11257] bridge_slave_0: entered promiscuous mode [ 326.505524][T11219] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.515316][T11219] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.524193][T11219] bridge_slave_0: entered allmulticast mode [ 326.531626][T11219] bridge_slave_0: entered promiscuous mode [ 326.599915][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.622959][T11257] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.631810][T11257] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.639795][T11257] bridge_slave_1: entered allmulticast mode [ 326.648645][T11257] bridge_slave_1: entered promiscuous mode [ 326.670342][T11219] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.677998][T11219] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.685360][T11219] bridge_slave_1: entered allmulticast mode [ 326.692977][T11219] bridge_slave_1: entered promiscuous mode [ 326.794512][ T5238] Bluetooth: hci3: command tx timeout [ 326.831990][T11219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.849999][T11257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.866678][T11257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.887878][T11219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.977386][T11219] team0: Port device team_slave_0 added [ 327.002052][T11257] team0: Port device team_slave_0 added [ 327.020051][T11441] netlink: 'syz.0.1360': attribute type 10 has an invalid length. [ 327.068448][T11441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.086064][T11441] team0: Port device batadv0 added [ 327.095044][T11219] team0: Port device team_slave_1 added [ 327.103204][T11257] team0: Port device team_slave_1 added [ 327.320756][ T63] bridge_slave_1: left allmulticast mode [ 327.329721][ T63] bridge_slave_1: left promiscuous mode [ 327.336003][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.344732][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1362'. [ 327.354759][T11453] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1362'. [ 327.374804][ T63] bridge_slave_0: left allmulticast mode [ 327.382129][ T63] bridge_slave_0: left promiscuous mode [ 327.395624][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 327.406505][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.675241][ T5238] Bluetooth: hci1: command tx timeout [ 327.874139][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1365'. [ 328.087580][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.117960][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.132608][ T63] bond0 (unregistering): Released all slaves [ 328.172220][T11219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.180143][T11219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.213534][T11219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.243004][T11257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.265102][T11257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.309210][T11257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.346026][T11257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.353002][T11257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.381643][T11257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.395786][ T2588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.419386][ T2588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.434610][T11219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.441673][T11219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.468971][T11219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.504417][T11484] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1367'. [ 328.710563][T11257] hsr_slave_0: entered promiscuous mode [ 328.731191][T11257] hsr_slave_1: entered promiscuous mode [ 328.806360][T11488] tipc: Enabling of bearer rejected, already enabled [ 328.874376][ T5238] Bluetooth: hci3: command tx timeout [ 328.875214][T11219] hsr_slave_0: entered promiscuous mode [ 328.906292][T11219] hsr_slave_1: entered promiscuous mode [ 328.917081][T11219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.928287][T11219] Cannot create hsr debugfs directory [ 329.015266][ T63] hsr_slave_0: left promiscuous mode [ 329.044744][ T63] hsr_slave_1: left promiscuous mode [ 329.078793][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.111763][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.155277][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.162726][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.180070][T11496] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 329.238659][ T63] veth1_macvtap: left promiscuous mode [ 329.259665][ T63] veth0_macvtap: left promiscuous mode [ 329.273889][ T63] veth1_vlan: left promiscuous mode [ 329.282988][ T63] veth0_vlan: left promiscuous mode [ 329.773987][ T5238] Bluetooth: hci1: command tx timeout [ 330.001512][ T63] team0 (unregistering): Port device team_slave_1 removed [ 330.049191][ T63] team0 (unregistering): Port device team_slave_0 removed [ 330.953594][ T5238] Bluetooth: hci3: command tx timeout [ 331.394996][T11543] netlink: 'syz.0.1380': attribute type 21 has an invalid length. [ 331.419877][T11543] netlink: 'syz.0.1380': attribute type 1 has an invalid length. [ 331.516899][T11257] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 331.722406][T11563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1384'. [ 331.810996][T11257] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 331.848920][T11257] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 331.887115][T11257] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 331.918638][T11569] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 331.938651][T11569] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 332.106159][T11575] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1386'. [ 332.125871][T11577] netlink: 'syz.0.1387': attribute type 9 has an invalid length. [ 332.152600][T11577] macvlan4: entered promiscuous mode [ 332.165561][T11577] bond0: entered promiscuous mode [ 332.170752][T11577] macvlan4: entered allmulticast mode [ 332.183700][T11577] bond0: entered allmulticast mode [ 332.190638][T11577] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 332.916534][T11257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.987184][T11257] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.066888][T11219] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 333.111888][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.119093][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.157962][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.165178][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.193699][T11219] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 333.221743][T11219] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 333.241555][T11628] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 333.256912][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1393'. [ 333.267764][T11219] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 333.399369][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1396'. [ 333.427171][T11633] SET target dimension over the limit! [ 333.587800][T11219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.682492][T11219] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.719152][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.726338][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.775969][T11649] netlink: 'syz.4.1401': attribute type 5 has an invalid length. [ 333.806828][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.814018][ T5971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.878315][T11257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.956479][T11656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1403'. [ 333.980923][T11656] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1403'. [ 334.006061][T11659] netlink: 'syz.4.1405': attribute type 1 has an invalid length. [ 334.021513][T11659] netlink: 612 bytes leftover after parsing attributes in process `syz.4.1405'. [ 334.094975][T11257] veth0_vlan: entered promiscuous mode [ 334.122448][T11257] veth1_vlan: entered promiscuous mode [ 334.228908][T11257] veth0_macvtap: entered promiscuous mode [ 334.271419][T11257] veth1_macvtap: entered promiscuous mode [ 334.327268][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.369756][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.402653][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.431668][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.456320][T11257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.558793][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.580258][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.612095][T11257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.631081][T11219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.687543][T11257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.720865][T11257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.732561][T11257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.760331][T11257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.804035][ T5242] Bluetooth: hci5: command 0x0406 tx timeout [ 334.804514][ T5245] Bluetooth: hci2: command 0x0406 tx timeout [ 335.028235][T11219] veth0_vlan: entered promiscuous mode [ 335.097554][T11219] veth1_vlan: entered promiscuous mode [ 335.110413][ T5971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.141690][ T5971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.267731][T11219] veth0_macvtap: entered promiscuous mode [ 335.292547][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.309974][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.321289][T11219] veth1_macvtap: entered promiscuous mode [ 335.381663][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.405236][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.421497][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.453624][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.473571][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.493980][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.525451][T11219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.609939][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.634445][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.653769][T11219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.672378][T11219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.703397][T11219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.735658][T11219] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.755961][T11219] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.773651][T11219] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.792597][T11219] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.025409][ T5971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.042107][ T5971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.119010][ T5971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.128166][ T5971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.138051][T11744] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1421'. [ 336.399651][T11754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1422'. [ 336.414184][T11754] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1422'. [ 336.447080][T11754] gretap1: entered promiscuous mode [ 336.452448][T11754] gretap1: entered allmulticast mode [ 337.608825][ T5971] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.895213][T11827] lo: entered promiscuous mode [ 337.959599][T11830] hsr0: entered promiscuous mode [ 337.976301][T11830] macsec2: entered allmulticast mode [ 337.981634][T11830] hsr0: entered allmulticast mode [ 337.997044][T11830] hsr_slave_0: entered allmulticast mode [ 338.020947][T11830] hsr_slave_1: entered allmulticast mode [ 338.119881][T11830] hsr0: left allmulticast mode [ 338.127250][T11830] hsr_slave_0: left allmulticast mode [ 338.136493][T11830] hsr_slave_1: left allmulticast mode [ 338.233377][T11825] lo: left promiscuous mode [ 338.323097][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.343588][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.353216][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.367545][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.394469][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.402782][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.477738][ T5971] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.536731][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1439'. [ 338.702971][ T5971] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.826144][ T5971] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.055876][ T5971] bridge_slave_1: left allmulticast mode [ 339.061551][ T5971] bridge_slave_1: left promiscuous mode [ 339.070875][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.080740][ T5971] bridge_slave_0: left allmulticast mode [ 339.096179][ T5971] bridge_slave_0: left promiscuous mode [ 339.101969][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.788267][T11912] netlink: 'syz.0.1441': attribute type 1 has an invalid length. [ 339.814464][T11912] nbd: couldn't find a device at index 2097172 [ 339.839954][ T5971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.884441][ T5971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.908779][ T5971] bond0 (unregistering): Released all slaves [ 339.963373][T11849] chnl_net:caif_netlink_parms(): no params data found [ 340.019759][T11909] tipc: Enabling of bearer rejected, already enabled [ 340.232947][T11927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1444'. [ 340.282878][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.300120][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.309739][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.320376][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.331733][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.339305][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.474390][ T5235] Bluetooth: hci1: command tx timeout [ 340.708564][T11849] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.739644][T11849] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.758688][T11849] bridge_slave_0: entered allmulticast mode [ 340.791906][T11849] bridge_slave_0: entered promiscuous mode [ 340.800964][T11973] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1451'. [ 340.831231][T11849] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.853732][T11849] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.863422][T11849] bridge_slave_1: entered allmulticast mode [ 340.879647][T11849] bridge_slave_1: entered promiscuous mode [ 341.014858][ T5971] hsr_slave_0: left promiscuous mode [ 341.023136][ T5971] hsr_slave_1: left promiscuous mode [ 341.031874][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.048940][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.059415][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.067578][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.092498][ T5971] veth1_macvtap: left promiscuous mode [ 341.098985][ T5971] veth0_macvtap: left promiscuous mode [ 341.106054][ T5971] veth1_vlan: left promiscuous mode [ 341.111412][ T5971] veth0_vlan: left promiscuous mode [ 341.681059][ T5971] team0 (unregistering): Port device team_slave_1 removed [ 341.719230][T11988] netlink: 'syz.1.1454': attribute type 1 has an invalid length. [ 341.741706][ T5971] team0 (unregistering): Port device team_slave_0 removed [ 342.162247][T11849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.178587][T11849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.300408][T11990] netlink: 'syz.4.1455': attribute type 2 has an invalid length. [ 342.310267][T11990] netlink: 'syz.4.1455': attribute type 4 has an invalid length. [ 342.334126][T11990] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1455'. [ 342.390458][T11992] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1455'. [ 342.396052][ T5235] Bluetooth: hci3: command tx timeout [ 342.414592][T11992] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1455'. [ 342.451678][T11996] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 342.479362][T11849] team0: Port device team_slave_0 added [ 342.535079][T11849] team0: Port device team_slave_1 added [ 342.555073][ T5235] Bluetooth: hci1: command tx timeout [ 342.683763][T11849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.720530][T11849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.775951][T11849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.790374][T11849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.798739][T11849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.834506][T11849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.855400][T12015] nbd: must specify a device to reconfigure [ 343.187006][T11849] hsr_slave_0: entered promiscuous mode [ 343.211273][T11849] hsr_slave_1: entered promiscuous mode [ 343.393296][ T5971] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.445815][T11930] chnl_net:caif_netlink_parms(): no params data found [ 343.580710][T12050] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1467'. [ 343.602217][ T5971] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.739044][ T5971] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.952080][ T5971] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.002846][T11930] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.010671][T11930] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.024072][T11930] bridge_slave_0: entered allmulticast mode [ 344.031704][T11930] bridge_slave_0: entered promiscuous mode [ 344.039511][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 344.048589][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 344.112501][T11930] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.131325][T11930] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.147002][T11930] bridge_slave_1: entered allmulticast mode [ 344.159368][T11930] bridge_slave_1: entered promiscuous mode [ 344.237355][T11930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.278027][T11930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.474083][ T5235] Bluetooth: hci3: command tx timeout [ 344.613300][T11930] team0: Port device team_slave_0 added [ 344.629153][T11930] team0: Port device team_slave_1 added [ 344.640074][ T5235] Bluetooth: hci1: command tx timeout [ 344.716953][T12110] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 344.740347][ T5971] bridge_slave_1: left allmulticast mode [ 344.765396][T12110] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 344.773069][ T5971] bridge_slave_1: left promiscuous mode [ 344.819936][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.893349][ T5971] bridge_slave_0: left allmulticast mode [ 344.903865][ T5971] bridge_slave_0: left promiscuous mode [ 344.909632][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.976516][T12120] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1481'. [ 345.142769][T12133] netlink: 'syz.0.1481': attribute type 1 has an invalid length. [ 345.188363][T12133] netlink: 9312 bytes leftover after parsing attributes in process `syz.0.1481'. [ 345.239195][T12133] netlink: 'syz.0.1481': attribute type 1 has an invalid length. [ 346.168295][ T5971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.197991][ T5971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.228556][ T5971] bond0 (unregistering): Released all slaves [ 346.553824][ T5235] Bluetooth: hci3: command tx timeout [ 346.725320][ T5235] Bluetooth: hci1: command tx timeout [ 346.735838][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1482'. [ 346.791654][T11930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.820605][T11930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.860138][T11930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.109135][T11930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.122208][T11930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.152214][T11930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.208173][T12159] syzkaller1: entered promiscuous mode [ 347.214935][T12159] syzkaller1: entered allmulticast mode [ 347.302573][T12155] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1489'. [ 347.319862][T12155] 0·: renamed from hsr_slave_1 (while UP) [ 347.331119][T12155] 0·: entered allmulticast mode [ 347.345393][T12155] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 347.391348][T12165] netlink: 'syz.4.1490': attribute type 1 has an invalid length. [ 347.435941][ T5971] hsr_slave_0: left promiscuous mode [ 347.449106][ T5971] hsr_slave_1: left promiscuous mode [ 347.456197][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.473342][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.487985][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.503124][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.525324][ T5971] veth1_macvtap: left promiscuous mode [ 347.530842][ T5971] veth0_macvtap: left promiscuous mode [ 347.537034][ T5971] veth1_vlan: left promiscuous mode [ 347.542296][ T5971] veth0_vlan: left promiscuous mode [ 348.048576][ T5971] team0 (unregistering): Port device team_slave_1 removed [ 348.108944][ T5971] team0 (unregistering): Port device team_slave_0 removed [ 348.535958][T11930] hsr_slave_0: entered promiscuous mode [ 348.543963][T11930] hsr_slave_1: entered promiscuous mode [ 348.552436][T11930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.562050][T11930] Cannot create hsr debugfs directory [ 348.635061][ T5238] Bluetooth: hci3: command tx timeout [ 348.835851][T12183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1493'. [ 348.943183][T12183] workqueue: name exceeds WQ_NAME_LEN. Truncating to: †< )Ù2¼”›U7‘Åä‹¡ô¾ÐËÝ;&!éi‡¼ [ 349.074287][T11849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 349.113380][T11849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 349.128041][T11849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 349.135867][T12188] netlink: 'syz.0.1496': attribute type 2 has an invalid length. [ 349.144320][T12188] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1496'. [ 349.153713][T11849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 349.159018][T12190] netlink: 'syz.0.1496': attribute type 2 has an invalid length. [ 349.175093][T12190] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1496'. [ 349.364228][T11849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.372246][T12199] netlink: 'syz.0.1498': attribute type 4 has an invalid length. [ 349.399397][T12199] netlink: 'syz.0.1498': attribute type 1 has an invalid length. [ 349.408347][T11849] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.433766][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.440964][ T5960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.466352][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.473533][ T5971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.576697][T11930] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 349.599928][T11930] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 349.631217][T11930] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 349.648343][T11930] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 349.800422][T12213] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1501'. [ 349.913032][T11930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.929759][T12218] netlink: 404 bytes leftover after parsing attributes in process `syz.4.1504'. [ 349.940958][T12218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1504'. [ 349.950860][T12218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1504'. [ 349.966268][T12218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1504'. [ 349.982347][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1505'. [ 350.027587][T11930] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.060226][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.067584][ T5971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.100362][T12224] netlink: 'syz.4.1506': attribute type 10 has an invalid length. [ 350.112017][T12224] netlink: 212412 bytes leftover after parsing attributes in process `syz.4.1506'. [ 350.125419][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.132549][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.141296][T12224] openvswitch: netlink: Flow key attr not present in new flow. [ 350.163012][T11849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.365635][T11849] veth0_vlan: entered promiscuous mode [ 350.400071][T11849] veth1_vlan: entered promiscuous mode [ 350.489339][T11849] veth0_macvtap: entered promiscuous mode [ 350.518958][T11849] veth1_macvtap: entered promiscuous mode [ 350.558036][T12243] netlink: 'syz.1.1511': attribute type 16 has an invalid length. [ 350.558169][T11849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.583337][T12243] netlink: 'syz.1.1511': attribute type 3 has an invalid length. [ 350.603574][T11849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.634415][T11849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.663028][T11849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.685836][T11849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.743110][T11849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.778044][T11849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.801119][T11849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.832302][T11849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.853023][T11849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.871684][T11849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.889024][T11849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.966906][T11930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.101847][ T5377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.124878][ T5377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.169824][ T5971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.170888][T11930] veth0_vlan: entered promiscuous mode [ 351.186991][ T5971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.219047][T11930] veth1_vlan: entered promiscuous mode [ 351.369632][T12276] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 351.397134][T11930] veth0_macvtap: entered promiscuous mode [ 351.416072][T11930] veth1_macvtap: entered promiscuous mode [ 351.456552][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.467767][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.478149][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.488788][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.498755][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.509291][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.522821][T11930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.546574][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.557338][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.568830][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.580263][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.592183][T11930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.632120][T11930] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.643344][T11930] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.652342][T11930] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.663360][T11930] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.761384][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.775594][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.809277][ T5970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.817691][ T5970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.177091][T12299] syz.0.1528[12299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.177553][T12299] syz.0.1528[12299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.315042][T12311] netlink: 'syz.0.1530': attribute type 1 has an invalid length. [ 352.353950][T12313] pim6reg: entered allmulticast mode [ 352.868014][T12351] openvswitch: netlink: Unknown nsh attribute 0 [ 352.891310][T12351] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 353.240967][T12366] ip6t_srh: unknown srh invflags 5F00 [ 353.356802][ T5971] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.300296][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.317441][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.333388][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.345671][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.353391][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 354.360896][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.536199][T12404] ipvlan1: left promiscuous mode [ 354.551508][T12404] ipvlan1: left allmulticast mode [ 354.566802][T12404] veth0_vlan: left allmulticast mode [ 354.598231][T12404] openvswitch: netlink: Key type 5408 is out of range max 32 [ 354.711764][T12392] chnl_net:caif_netlink_parms(): no params data found [ 354.773381][T12392] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.781860][T12392] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.789491][T12392] bridge_slave_0: entered allmulticast mode [ 354.798249][T12392] bridge_slave_0: entered promiscuous mode [ 354.808617][T12392] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.815925][T12392] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.823076][T12392] bridge_slave_1: entered allmulticast mode [ 354.830255][T12392] bridge_slave_1: entered promiscuous mode [ 354.858260][T12392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.870730][T12392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.905627][T12392] team0: Port device team_slave_0 added [ 354.915215][T12392] team0: Port device team_slave_1 added [ 354.939283][T12392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.946379][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.973701][T12392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.991386][T12392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.013801][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.041152][T12392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.079729][T12392] hsr_slave_0: entered promiscuous mode [ 355.089460][T12392] hsr_slave_1: entered promiscuous mode [ 355.095658][T12392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.103202][T12392] Cannot create hsr debugfs directory [ 355.194745][ T5971] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.260271][ T5971] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.310329][ T5971] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.402645][ T5971] bridge_slave_1: left allmulticast mode [ 355.408396][ T5971] bridge_slave_1: left promiscuous mode [ 355.414103][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.423115][ T5971] bridge_slave_0: left allmulticast mode [ 355.429299][ T5971] bridge_slave_0: left promiscuous mode [ 355.435515][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.898838][ T5971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.929552][ T5971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.964232][ T5971] bond0 (unregistering): Released all slaves [ 356.204228][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.216089][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.239973][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.249051][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.262652][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 356.270986][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.474467][ T5238] Bluetooth: hci1: command tx timeout [ 356.482910][ T5971] hsr_slave_0: left promiscuous mode [ 356.510576][ T5971] hsr_slave_1: left promiscuous mode [ 356.521662][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.535842][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.546603][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.557878][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.582596][ T5971] veth1_macvtap: left promiscuous mode [ 356.588330][ T5971] veth0_macvtap: left promiscuous mode [ 356.595303][ T5971] veth1_vlan: left promiscuous mode [ 356.600637][ T5971] veth0_vlan: left promiscuous mode [ 356.948721][T12454] __nla_validate_parse: 10 callbacks suppressed [ 356.948738][T12454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1570'. [ 357.239801][ T5971] team0 (unregistering): Port device team_slave_1 removed [ 357.287196][ T5971] team0 (unregistering): Port device team_slave_0 removed [ 357.780650][T12448] netlink: 'syz.4.1568': attribute type 27 has an invalid length. [ 357.804202][T12458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1571'. [ 358.013426][T12466] ip_vti0: Master is either lo or non-ether device [ 358.046480][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1573'. [ 358.228867][T12392] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 358.254203][T12392] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 358.272339][T12392] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 358.302451][T12392] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 358.331004][ T5238] Bluetooth: hci3: command tx timeout [ 358.431931][T12433] chnl_net:caif_netlink_parms(): no params data found [ 358.550437][ T5971] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.561238][ T5238] Bluetooth: hci1: command tx timeout [ 358.676898][ T5971] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.702534][T12486] syzkaller1: entered promiscuous mode [ 358.709768][T12486] syzkaller1: entered allmulticast mode [ 358.812057][ T5971] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.872094][T12433] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.884245][T12433] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.891711][T12433] bridge_slave_0: entered allmulticast mode [ 358.901044][T12433] bridge_slave_0: entered promiscuous mode [ 358.947134][ T5971] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.970205][T12433] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.977650][T12433] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.985323][T12433] bridge_slave_1: entered allmulticast mode [ 358.994652][T12433] bridge_slave_1: entered promiscuous mode [ 359.056773][T12433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.092532][T12433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.189593][T12433] team0: Port device team_slave_0 added [ 359.201488][T12433] team0: Port device team_slave_1 added [ 359.299715][T12433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.313927][T12433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.341904][T12433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.380828][T12508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1585'. [ 359.395775][T12508] tipc: Enabling of bearer rejected, failed to enable media [ 359.453751][T12514] Bluetooth: hci0: load_link_keys: too big key_count value 31744 [ 359.462659][T12433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.482970][T12433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.519183][T12433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.565869][T12392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.643176][ T5971] bridge_slave_1: left allmulticast mode [ 359.649440][ T5971] bridge_slave_1: left promiscuous mode [ 359.663322][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.674620][ T5971] bridge_slave_0: left allmulticast mode [ 359.688531][ T5971] bridge_slave_0: left promiscuous mode [ 359.697317][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.131442][ T5971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.142702][ T5971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.153334][ T5971] bond0 (unregistering): Released all slaves [ 360.177989][T12392] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.193259][T12528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1589'. [ 360.203727][T12528] netlink: 'syz.0.1589': attribute type 5 has an invalid length. [ 360.218396][T12528] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.227205][T12528] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.236747][T12528] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.246094][T12528] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.264873][T12528] vxlan0: entered promiscuous mode [ 360.329528][T12433] hsr_slave_0: entered promiscuous mode [ 360.346526][T12433] hsr_slave_1: entered promiscuous mode [ 360.393780][ T5238] Bluetooth: hci3: command tx timeout [ 360.408052][T12543] xt_l2tp: v2 tid > 0xffff: 150994944 [ 360.455802][ T5377] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.462963][ T5377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.541506][T12547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1596'. [ 360.610052][T12549] veth0_vlan: left promiscuous mode [ 360.619361][T12549] veth0_vlan: entered promiscuous mode [ 360.635905][ T5238] Bluetooth: hci1: command tx timeout [ 360.692153][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.699401][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.865385][ T5971] hsr_slave_0: left promiscuous mode [ 360.871271][ T5971] hsr_slave_1: left promiscuous mode [ 360.889201][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.897263][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.908542][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1599'. [ 360.918514][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.926169][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.948920][ T5971] veth1_macvtap: left promiscuous mode [ 360.954859][ T5971] veth0_macvtap: left promiscuous mode [ 360.960505][ T5971] veth1_vlan: left promiscuous mode [ 360.965889][ T5971] veth0_vlan: left promiscuous mode [ 361.496485][T12569] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1601'. [ 361.561509][ T5971] team0 (unregistering): Port device team_slave_1 removed [ 361.601327][ T5971] team0 (unregistering): Port device team_slave_0 removed [ 362.023306][T12561] netlink: 'syz.4.1599': attribute type 21 has an invalid length. [ 362.234199][T12573] IPVS: Scheduler module ip_vs_ not found [ 362.283434][T12573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1602'. [ 362.403149][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'. [ 362.484339][ T5238] Bluetooth: hci3: command tx timeout [ 362.701013][T12599] netlink: 'syz.4.1609': attribute type 6 has an invalid length. [ 362.714094][ T5238] Bluetooth: hci1: command tx timeout [ 362.736104][T12392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.755410][T12599] netlink: 'syz.4.1609': attribute type 12 has an invalid length. [ 362.812748][T12392] veth0_vlan: entered promiscuous mode [ 362.852855][T12392] veth1_vlan: entered promiscuous mode [ 362.934076][T12607] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1612'. [ 362.974788][T12608] syz.0.1612[12608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.009100][T12392] veth0_macvtap: entered promiscuous mode [ 363.054326][T12433] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 363.081263][T12433] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 363.125966][T12619] netlink: 'syz.0.1615': attribute type 1 has an invalid length. [ 363.132608][T12392] veth1_macvtap: entered promiscuous mode [ 363.139597][T12619] netlink: 612 bytes leftover after parsing attributes in process `syz.0.1615'. [ 363.159211][T12620] xt_bpf: check failed: parse error [ 363.227973][T12615] 0ªX¹¦Dö»: left allmulticast mode [ 363.297155][T12433] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 363.426972][T12433] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 363.522376][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.544719][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.555072][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.565988][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.577919][T12392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.596684][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.608550][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.619915][T12392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.706976][T12392] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.724385][T12392] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.731410][T12645] delete_channel: no stack [ 363.740239][T12392] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.750473][T12392] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.764589][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1620'. [ 363.846668][T12644] net veth1_virt_wifi p: renamed from virt_wifi0 [ 363.874143][T12648] netlink: 'syz.4.1622': attribute type 10 has an invalid length. [ 363.915322][T12648] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.943410][T12648] bond0: (slave team0): Enslaving as an active interface with an up link [ 364.027123][T12648] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1622'. [ 364.061099][T12647] netlink: 'syz.4.1622': attribute type 10 has an invalid length. [ 364.083267][T12647] bond0: (slave team0): Releasing backup interface [ 364.100804][T12647] bridge0: port 3(team0) entered blocking state [ 364.110320][T12647] bridge0: port 3(team0) entered disabled state [ 364.119562][T12647] team0: entered allmulticast mode [ 364.125898][T12647] team_slave_0: entered allmulticast mode [ 364.138311][T12647] team_slave_1: entered allmulticast mode [ 364.148372][T12647] team0: entered promiscuous mode [ 364.153419][T12647] team_slave_0: entered promiscuous mode [ 364.161535][T12647] team_slave_1: entered promiscuous mode [ 364.348621][T12433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.440748][T12433] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.450758][ T1072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.471454][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.478619][ T5971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.480454][ T1072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.510309][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.517499][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.555112][ T5238] Bluetooth: hci3: command tx timeout [ 364.646163][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.681385][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.058294][T12433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.082447][T12689] netlink: 372 bytes leftover after parsing attributes in process `syz.4.1634'. [ 365.139653][T12689] netlink: 'syz.4.1634': attribute type 1 has an invalid length. [ 365.151321][T12433] veth0_vlan: entered promiscuous mode [ 365.164737][T12689] netlink: 'syz.4.1634': attribute type 2 has an invalid length. [ 365.178126][T12433] veth1_vlan: entered promiscuous mode [ 365.192874][T12689] netlink: 'syz.4.1634': attribute type 1 has an invalid length. [ 365.212271][T12689] netlink: 'syz.4.1634': attribute type 2 has an invalid length. [ 365.227774][T12689] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1634'. [ 365.263053][T12433] veth0_macvtap: entered promiscuous mode [ 365.308311][T12433] veth1_macvtap: entered promiscuous mode [ 365.383893][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.409332][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.424879][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.444776][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.455971][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.467540][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.480368][T12433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.500014][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.518992][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.529476][T12433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.545426][T12433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.561070][T12433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.577157][T12695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1635'. [ 365.604881][T12706] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1638'. [ 365.644411][T12433] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.656787][T12433] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.676115][T12433] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.695619][T12703] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 365.703204][T12433] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.885500][ T5960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.909392][ T5960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.967851][ T5970] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.111136][ T5960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.129570][ T5960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.310992][ T5970] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.406076][ T5970] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.506992][ T5970] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.621531][ T5970] bridge_slave_1: left allmulticast mode [ 366.628219][ T5970] bridge_slave_1: left promiscuous mode [ 366.648227][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.686280][ T5970] bridge_slave_0: left allmulticast mode [ 366.691976][ T5970] bridge_slave_0: left promiscuous mode [ 366.710472][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.023668][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.031833][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.052571][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.071851][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.080044][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 367.087477][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.269482][ T5970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.287295][ T5970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.298540][ T5970] bond0 (unregistering): Released all slaves [ 367.332180][T12737] __nla_validate_parse: 8 callbacks suppressed [ 367.332199][T12737] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1645'. [ 367.365612][T12738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1645'. [ 367.585368][T12745] netlink: 'syz.0.1647': attribute type 11 has an invalid length. [ 367.628029][T12749] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 367.649219][T12749] netlink: 'syz.1.1649': attribute type 2 has an invalid length. [ 367.675568][T12749] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 367.792587][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1651'. [ 367.859211][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'. [ 367.868452][T12765] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1652'. [ 367.891872][ T5970] hsr_slave_0: left promiscuous mode [ 367.897824][T12767] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 367.911769][ T5970] hsr_slave_1: left promiscuous mode [ 367.943329][T12765] IPVS: set_ctl: invalid protocol: 108 10.1.1.2:20002 [ 367.950718][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.973614][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.991973][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.011837][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.046472][T12773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1653'. [ 368.081525][ T5970] veth1_macvtap: left promiscuous mode [ 368.097370][ T5970] veth0_macvtap: left promiscuous mode [ 368.103043][ T5970] veth1_vlan: left promiscuous mode [ 368.145266][ T5970] veth0_vlan: left promiscuous mode [ 368.662404][ T5970] team0 (unregistering): Port device team_slave_1 removed [ 368.708366][ T5970] team0 (unregistering): Port device team_slave_0 removed [ 369.194069][ T5238] Bluetooth: hci1: command tx timeout [ 369.211805][T12740] chnl_net:caif_netlink_parms(): no params data found [ 369.314132][T12740] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.321235][T12740] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.328706][T12740] bridge_slave_0: entered allmulticast mode [ 369.335512][T12740] bridge_slave_0: entered promiscuous mode [ 369.343372][T12740] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.352685][T12740] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.360200][T12740] bridge_slave_1: entered allmulticast mode [ 369.368407][T12740] bridge_slave_1: entered promiscuous mode [ 369.399919][T12740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.418172][T12740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.564856][T12740] team0: Port device team_slave_0 added [ 369.601862][T12740] team0: Port device team_slave_1 added [ 369.683334][T12794] netlink: 'syz.0.1658': attribute type 16 has an invalid length. [ 369.688913][T12740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.699335][T12740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.723590][T12794] netlink: 'syz.0.1658': attribute type 3 has an invalid length. [ 369.725895][T12740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.748082][T12794] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1658'. [ 369.767936][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1658'. [ 369.854137][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 369.863741][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 369.871698][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 369.880606][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 369.888481][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 369.896993][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.924011][T12740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.932053][T12740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.957236][T12798] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 369.960134][T12740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.014660][ T5970] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.036340][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1659'. [ 370.127992][ T5970] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.195138][T12809] No such timeout policy "syz0" [ 370.227928][ T5970] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.253067][T12740] hsr_slave_0: entered promiscuous mode [ 370.272067][T12740] hsr_slave_1: entered promiscuous mode [ 370.279527][T12740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.290344][T12740] Cannot create hsr debugfs directory [ 370.346937][ T5970] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.450720][T12817] openvswitch: netlink: Flow actions attr not present in new flow. [ 370.817356][ T5970] bridge_slave_1: left allmulticast mode [ 370.823055][ T5970] bridge_slave_1: left promiscuous mode [ 370.825924][T12832] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 370.839491][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.849764][ T5970] bridge_slave_0: left allmulticast mode [ 370.865804][ T5970] bridge_slave_0: left promiscuous mode [ 370.874107][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.274872][ T5235] Bluetooth: hci1: command tx timeout [ 371.488956][ T5970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.503887][ T5970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.517524][ T5970] bond0 (unregistering): Released all slaves [ 371.568548][T12799] chnl_net:caif_netlink_parms(): no params data found [ 371.914227][ T5235] Bluetooth: hci3: command tx timeout [ 372.112092][T12799] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.139903][T12799] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.166258][T12799] bridge_slave_0: entered allmulticast mode [ 372.188265][T12799] bridge_slave_0: entered promiscuous mode [ 372.203220][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 372.212572][T12799] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.220419][T12799] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.235587][T12799] bridge_slave_1: entered allmulticast mode [ 372.243275][T12799] bridge_slave_1: entered promiscuous mode [ 372.376732][T12740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 372.420378][T12893] netlink: 'syz.1.1682': attribute type 1 has an invalid length. [ 372.434478][T12893] __nla_validate_parse: 1 callbacks suppressed [ 372.434496][T12893] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1682'. [ 372.459822][ T5970] hsr_slave_0: left promiscuous mode [ 372.476625][ T5970] hsr_slave_1: left promiscuous mode [ 372.488314][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.495907][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.512890][ T5970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.520616][ T5970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.563226][ T5970] veth1_macvtap: left promiscuous mode [ 372.569103][ T5970] veth0_macvtap: left promiscuous mode [ 372.574938][ T5970] veth1_vlan: left promiscuous mode [ 372.580311][ T5970] veth0_vlan: left promiscuous mode [ 373.167566][ T5970] team0 (unregistering): Port device team_slave_1 removed [ 373.212292][ T5970] team0 (unregistering): Port device team_slave_0 removed [ 373.363739][ T5235] Bluetooth: hci1: command tx timeout [ 373.647828][T12740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.660535][T12895] netlink: 'syz.0.1683': attribute type 29 has an invalid length. [ 373.669471][T12740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.717866][T12740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 373.747914][T12799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.777553][T12799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.797782][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1686'. [ 373.908538][T12799] team0: Port device team_slave_0 added [ 373.925995][T12917] netlink: 'syz.4.1688': attribute type 11 has an invalid length. [ 373.948175][T12799] team0: Port device team_slave_1 added [ 373.993930][ T5235] Bluetooth: hci3: command tx timeout [ 374.036555][T12923] netlink: 'syz.0.1689': attribute type 1 has an invalid length. [ 374.044630][T12923] netlink: 9396 bytes leftover after parsing attributes in process `syz.0.1689'. [ 374.059156][T12923] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1689'. [ 374.121625][T12799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.141699][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.168585][T12799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.208143][T12799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.224992][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.257287][T12799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.335696][T12799] hsr_slave_0: entered promiscuous mode [ 374.342048][T12799] hsr_slave_1: entered promiscuous mode [ 374.467463][T12935] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1693'. [ 374.522171][T12740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.579212][T12740] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.595543][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.602658][ T5960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.631395][ T5376] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.638605][ T5376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.847138][T12740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.000249][T12740] veth0_vlan: entered promiscuous mode [ 375.011274][T12799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 375.023450][T12799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 375.048827][T12799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 375.069298][T12799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 375.121328][T12740] veth1_vlan: entered promiscuous mode [ 375.146123][T12950] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1695'. [ 375.235400][T12740] veth0_macvtap: entered promiscuous mode [ 375.266762][T12740] veth1_macvtap: entered promiscuous mode [ 375.326752][T12740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.338825][T12740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.349649][T12740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.367369][T12740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.405421][T12740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.433701][ T5235] Bluetooth: hci1: command tx timeout [ 375.465091][T12740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.503765][T12740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.529649][T12740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.579998][T12740] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.603062][T12740] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.613338][T12740] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.639272][T12740] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.698107][T12799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.789662][T12799] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.835004][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.842185][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.878648][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.885163][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.885809][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.893466][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.972111][T12995] geneve2: entered promiscuous mode [ 375.977500][T12995] geneve2: entered allmulticast mode [ 375.989428][ T5376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.015551][ T5376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.074496][ T5235] Bluetooth: hci3: command tx timeout [ 376.466422][T13017] netlink: 'syz.0.1711': attribute type 4 has an invalid length. [ 376.478412][T13017] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.499122][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 376.510972][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.531571][T13016] dummy0: entered promiscuous mode [ 376.543006][T13016] dummy0: left promiscuous mode [ 376.585799][T12799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.676740][T12799] veth0_vlan: entered promiscuous mode [ 376.702394][T12799] veth1_vlan: entered promiscuous mode [ 376.781775][T12799] veth0_macvtap: entered promiscuous mode [ 376.846996][T12799] veth1_macvtap: entered promiscuous mode [ 376.865808][T13028] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1716'. [ 376.889025][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.920621][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.933704][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.949836][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.960456][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.977479][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.990770][T12799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.031488][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.063400][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.083786][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.111798][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.127860][T12799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.139705][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1721'. [ 377.165406][T12799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.183573][T12799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.201647][T12799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.228734][T12799] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.251977][T13047] netlink: 'syz.0.1723': attribute type 1 has an invalid length. [ 377.264046][T13047] netlink: 9396 bytes leftover after parsing attributes in process `syz.0.1723'. [ 377.453122][T13054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1723'. [ 377.456539][ T5376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.481273][ T5376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.488099][ T58] IPVS: starting estimator thread 0... [ 377.501468][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1727'. [ 377.522115][ T5960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.527941][T13057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.531413][ T5960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.594556][T13058] IPVS: using max 19 ests per chain, 45600 per kthread [ 378.154464][ T5970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.165224][ T5970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.262127][T13071] sock: sock_timestamping_bind_phc: sock not bind to device [ 378.359493][T13077] delete_channel: no stack [ 378.549263][T13086] netlink: 'syz.4.1740': attribute type 3 has an invalid length. [ 378.558899][T13086] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1740'. [ 378.646367][ T5376] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.445143][T13094] netlink: 'syz.0.1741': attribute type 1 has an invalid length. [ 379.458775][T13094] netlink: 9336 bytes leftover after parsing attributes in process `syz.0.1741'. [ 379.469467][T13094] netlink: 'syz.0.1741': attribute type 8 has an invalid length. [ 379.556559][T13099] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 379.809080][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 379.823686][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 379.833867][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 379.843931][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 379.853968][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 379.862652][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.032864][ T5376] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.117565][ T5376] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.168566][T13111] chnl_net:caif_netlink_parms(): no params data found [ 380.208413][ T5376] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.291446][T13111] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.301518][T13111] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.309440][T13111] bridge_slave_0: entered allmulticast mode [ 380.316988][T13111] bridge_slave_0: entered promiscuous mode [ 380.334638][T13111] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.341802][T13111] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.352925][T13111] bridge_slave_1: entered allmulticast mode [ 380.359860][T13111] bridge_slave_1: entered promiscuous mode [ 380.389915][ T5376] bridge_slave_1: left allmulticast mode [ 380.396590][ T5376] bridge_slave_1: left promiscuous mode [ 380.402748][ T5376] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.411429][ T5376] bridge_slave_0: left allmulticast mode [ 380.417544][ T5376] bridge_slave_0: left promiscuous mode [ 380.423216][ T5376] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.771756][ T5376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.783022][ T5376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.796203][ T5376] bond0 (unregistering): Released all slaves [ 380.821904][T13111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.840390][T13111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.901278][T13111] team0: Port device team_slave_0 added [ 380.911148][T13111] team0: Port device team_slave_1 added [ 380.961506][T13111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.968707][T13111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.995047][T13111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.009219][T13111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.016930][T13111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.043261][T13111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.123012][T13111] hsr_slave_0: entered promiscuous mode [ 381.130192][T13111] hsr_slave_1: entered promiscuous mode [ 381.137912][T13111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.146225][T13111] Cannot create hsr debugfs directory [ 381.170627][ T5376] hsr_slave_0: left promiscuous mode [ 381.178559][ T5376] hsr_slave_1: left promiscuous mode [ 381.186338][ T5376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.194113][ T5376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.202077][ T5376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.209627][ T5376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.231984][ T5376] veth1_macvtap: left promiscuous mode [ 381.238080][ T5376] veth0_macvtap: left promiscuous mode [ 381.244181][ T5376] veth1_vlan: left promiscuous mode [ 381.249516][ T5376] veth0_vlan: left promiscuous mode [ 381.403238][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1749'. [ 381.649775][T13138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1751'. [ 381.721471][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 381.731660][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 381.740075][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 381.749474][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 381.766152][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 381.773577][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 381.914666][ T5235] Bluetooth: hci1: command tx timeout [ 382.071545][ T5376] team0 (unregistering): Port device team_slave_1 removed [ 382.114707][ T5376] team0 (unregistering): Port device team_slave_0 removed [ 382.566114][T13125] pimreg: entered allmulticast mode [ 382.571505][T13131] pimreg: left allmulticast mode [ 382.621022][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1751'. [ 382.630091][T13132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1751'. [ 382.800288][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1754'. [ 382.825486][T13148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1753'. [ 382.899578][T13150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1753'. [ 383.270668][T13161] ax25_connect(): syz.0.1757 uses autobind, please contact jreuter@yaina.de [ 383.348326][T13139] chnl_net:caif_netlink_parms(): no params data found [ 383.513017][ T5376] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.585689][T13171] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1760'. [ 383.720524][ T5376] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.795772][T13178] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1761'. [ 383.835457][ T5235] Bluetooth: hci3: command tx timeout [ 383.841681][T13178] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1761'. [ 383.862958][T13178] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1761'. [ 383.994939][ T5235] Bluetooth: hci1: command 0x041b tx timeout [ 384.006986][ T5376] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.073159][T13139] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.090625][T13139] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.114703][T13139] bridge_slave_0: entered allmulticast mode [ 384.141201][T13139] bridge_slave_0: entered promiscuous mode [ 384.168894][T13178] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1761'. [ 384.256578][T13181] ip6gre1: entered promiscuous mode [ 384.261837][T13181] ip6gre1: entered allmulticast mode [ 384.426266][ T5376] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.478145][T13139] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.507604][T13139] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.532321][T13139] bridge_slave_1: entered allmulticast mode [ 384.557121][T13139] bridge_slave_1: entered promiscuous mode [ 384.720395][T13139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.753785][T13139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.921443][T13139] team0: Port device team_slave_0 added [ 384.996574][T13139] team0: Port device team_slave_1 added [ 385.174767][T13139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.189762][T13139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.220925][T13139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.241754][T13111] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 385.282290][T13111] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 385.311674][ T5376] bridge_slave_1: left allmulticast mode [ 385.349197][ T5376] bridge_slave_1: left promiscuous mode [ 385.364051][ T5376] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.380629][ T5376] bridge_slave_0: left allmulticast mode [ 385.399665][ T5376] bridge_slave_0: left promiscuous mode [ 385.407628][ T5376] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.615549][T13225] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 385.633384][T13225] netlink: 'syz.1.1773': attribute type 1 has an invalid length. [ 385.825809][T13230] dccp_invalid_packet: P.Data Offset(0) too small [ 385.919406][ T5238] Bluetooth: hci3: command tx timeout [ 385.958116][ T5376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.972539][ T5376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.984030][ T5376] bond0 (unregistering): Released all slaves [ 385.996232][T13139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.003181][T13139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.029729][T13139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.042400][T13210] sit0: entered promiscuous mode [ 386.065252][T13210] netlink: 'syz.0.1769': attribute type 1 has an invalid length. [ 386.073370][T13111] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 386.080315][ T5238] Bluetooth: hci1: command 0x041b tx timeout [ 386.130082][T13111] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 386.166067][T13229] netlink: 'syz.1.1775': attribute type 2 has an invalid length. [ 386.198464][T13231] netlink: 'syz.1.1775': attribute type 2 has an invalid length. [ 386.327829][T13234] vlan2: entered allmulticast mode [ 386.369280][T13139] hsr_slave_0: entered promiscuous mode [ 386.378904][T13139] hsr_slave_1: entered promiscuous mode [ 386.389913][T13139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.405675][T13139] Cannot create hsr debugfs directory [ 386.626655][ T5376] hsr_slave_0: left promiscuous mode [ 386.633443][ T5376] hsr_slave_1: left promiscuous mode [ 386.645114][ T5376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.663336][ T5376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.671899][ T5376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.679538][ T5376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.709243][ T5376] veth1_macvtap: left promiscuous mode [ 386.723628][ T5376] veth0_macvtap: left promiscuous mode [ 386.729216][ T5376] veth1_vlan: left promiscuous mode [ 386.743698][ T5376] veth0_vlan: left promiscuous mode [ 387.318507][ T5376] team0 (unregistering): Port device team_slave_1 removed [ 387.362369][ T5376] team0 (unregistering): Port device team_slave_0 removed [ 387.821383][T13247] __nla_validate_parse: 9 callbacks suppressed [ 387.821400][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1780'. [ 388.004164][ T5238] Bluetooth: hci3: command tx timeout [ 388.164030][ T5238] Bluetooth: hci1: command 0x041b tx timeout [ 388.302562][T13286] netlink: 'syz.4.1786': attribute type 5 has an invalid length. [ 388.418211][T13111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.485161][T13111] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.513440][ T5376] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.520677][ T5376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.554087][ T5376] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.561318][ T5376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.907049][T13139] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 388.933344][T13139] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 388.973164][T13139] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 389.007244][T13139] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 389.075021][T13315] ipt_ECN: cannot use operation on non-tcp rule [ 389.094748][T13111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.242566][T13111] veth0_vlan: entered promiscuous mode [ 389.291377][T13111] veth1_vlan: entered promiscuous mode [ 389.324674][T13139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.401218][T13319] ------------[ cut here ]------------ [ 389.407163][T13319] WARNING: CPU: 0 PID: 13319 at kernel/softirq.c:362 __local_bh_enable_ip+0x1be/0x200 [ 389.416749][T13319] Modules linked in: [ 389.420777][T13319] CPU: 0 UID: 0 PID: 13319 Comm: syz.0.1795 Not tainted 6.11.0-rc6-syzkaller-00178-gd759ee240d3c #0 [ 389.431558][T13319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 389.441654][T13319] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 389.447668][T13319] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 4c a3 18 90 80 e1 07 80 c1 03 38 [ 389.467298][T13319] RSP: 0018:ffffc90002e76f40 EFLAGS: 00010046 [ 389.473401][T13319] RAX: 0000000000000000 RBX: 1ffff920005cedec RCX: ffffc90002e76f03 [ 389.481397][T13319] RDX: 0000000000000005 RSI: 0000000000000200 RDI: ffffffff89877b3a [ 389.489388][T13319] RBP: ffffc90002e76ff0 R08: ffffffff901870ef R09: 1ffffffff2030e1d [ 389.497385][T13319] R10: dffffc0000000000 R11: fffffbfff2030e1e R12: dffffc0000000000 [ 389.505379][T13319] R13: 1ffff11005022120 R14: ffffc90002e76f80 R15: 0000000000000200 [ 389.513377][T13319] FS: 00007f085811f6c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 389.522337][T13319] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.528944][T13319] CR2: 00007f08573626e0 CR3: 000000007eb5c000 CR4: 00000000003506f0 [ 389.536944][T13319] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 389.544937][T13319] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 389.552932][T13319] Call Trace: [ 389.556227][T13319] [ 389.559172][T13319] ? __warn+0x163/0x4e0 [ 389.563353][T13319] ? __local_bh_enable_ip+0x1be/0x200 [ 389.568760][T13319] ? report_bug+0x2b3/0x500 [ 389.573294][T13319] ? __local_bh_enable_ip+0x1be/0x200 [ 389.578714][T13319] ? handle_bug+0x3e/0x70 [ 389.583072][T13319] ? exc_invalid_op+0x1a/0x50 [ 389.587778][T13319] ? asm_exc_invalid_op+0x1a/0x20 [ 389.592845][T13319] ? __dev_queue_xmit+0x2da/0x3e90 [ 389.597986][T13319] ? __local_bh_enable_ip+0x1be/0x200 [ 389.603373][T13319] ? dev_hard_start_xmit+0x773/0x7e0 [ 389.608650][T13319] ? __dev_queue_xmit+0x2da/0x3e90 [ 389.613755][T13319] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 389.619474][T13319] ? __dev_queue_xmit+0x2da/0x3e90 [ 389.624594][T13319] __dev_queue_xmit+0x1763/0x3e90 [ 389.629629][T13319] ? kasan_save_track+0x51/0x80 [ 389.634481][T13319] ? ieee80211_do_stop+0x13d9/0x1f40 [ 389.639768][T13319] ? cfg80211_change_iface+0x782/0xf30 [ 389.645241][T13319] ? wext_ioctl_dispatch+0x58e/0x640 [ 389.650532][T13319] ? __dev_queue_xmit+0x2da/0x3e90 [ 389.655639][T13319] ? __se_sys_ioctl+0xfc/0x170 [ 389.660401][T13319] ? do_syscall_64+0xf3/0x230 [ 389.665082][T13319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.671142][T13319] ? __pfx___dev_queue_xmit+0x10/0x10 [ 389.676521][T13319] ? __copy_skb_header+0x437/0x5b0 [ 389.681642][T13319] ? __asan_memcpy+0x40/0x70 [ 389.686273][T13319] ? skb_clone+0x240/0x390 [ 389.690711][T13319] __netlink_deliver_tap+0x54d/0x7c0 [ 389.696012][T13319] ? netlink_deliver_tap+0x2e/0x1b0 [ 389.701216][T13319] netlink_deliver_tap+0x19d/0x1b0 [ 389.706340][T13319] netlink_broadcast_filtered+0xe60/0x12a0 [ 389.712159][T13319] genlmsg_multicast_netns+0x93/0xd0 [ 389.717439][T13319] nl80211_frame_tx_status+0x8fa/0xda0 [ 389.722925][T13319] ? __pfx_nl80211_frame_tx_status+0x10/0x10 [ 389.728895][T13319] ? do_raw_spin_unlock+0x13c/0x8b0 [ 389.734087][T13319] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 389.739971][T13319] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 389.746306][T13319] ? ieee80211_report_used_skb+0x1621/0x2470 [ 389.752319][T13319] ieee80211_report_used_skb+0x19eb/0x2470 [ 389.758136][T13319] ? __pfx_ieee80211_report_used_skb+0x10/0x10 [ 389.764297][T13319] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 389.769755][T13319] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 389.775741][T13319] ieee80211_free_txskb+0x24/0x40 [ 389.780764][T13319] ieee80211_do_stop+0x13d9/0x1f40 [ 389.785875][T13319] ? __ieee80211_stop_queue+0x1fe/0x460 [ 389.791412][T13319] ? _find_next_bit+0xec/0x120 [ 389.796183][T13319] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 389.801632][T13319] ? ieee80211_stop_vif_queues+0x15b/0x1a0 [ 389.807434][T13319] ? __pfx_ieee80211_stop_vif_queues+0x10/0x10 [ 389.813581][T13319] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 389.819994][T13319] ieee80211_if_change_type+0x4cd/0xad0 [ 389.825557][T13319] ieee80211_change_iface+0xd2/0x4f0 [ 389.830836][T13319] ? cfg80211_mlme_purge_registrations+0x1fa/0x230 [ 389.837336][T13319] cfg80211_change_iface+0x782/0xf30 [ 389.842620][T13319] cfg80211_wext_siwmode+0x1bb/0x290 [ 389.847984][T13319] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 389.853783][T13319] ? __pfx___mutex_lock+0x10/0x10 [ 389.858803][T13319] ? full_name_hash+0x93/0xe0 [ 389.863490][T13319] ioctl_standard_call+0xe3/0x290 [ 389.868516][T13319] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 389.874309][T13319] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 389.880106][T13319] wext_ioctl_dispatch+0x58e/0x640 [ 389.885211][T13319] ? __pfx_ioctl_standard_call+0x10/0x10 [ 389.890832][T13319] ? __pfx_ioctl_private_call+0x10/0x10 [ 389.896370][T13319] ? __pfx_wext_ioctl_dispatch+0x10/0x10 [ 389.901994][T13319] ? __might_fault+0xc6/0x120 [ 389.906673][T13319] wext_handle_ioctl+0x15f/0x270 [ 389.911604][T13319] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 389.917076][T13319] sock_ioctl+0x17f/0x8e0 [ 389.921401][T13319] ? __pfx_sock_ioctl+0x10/0x10 [ 389.926245][T13319] ? __fget_files+0x29/0x470 [ 389.930834][T13319] ? __fget_files+0x3f6/0x470 [ 389.935501][T13319] ? __fget_files+0x29/0x470 [ 389.940090][T13319] ? bpf_lsm_file_ioctl+0x9/0x10 [ 389.945021][T13319] ? security_file_ioctl+0x87/0xb0 [ 389.950126][T13319] ? __pfx_sock_ioctl+0x10/0x10 [ 389.954973][T13319] __se_sys_ioctl+0xfc/0x170 [ 389.959554][T13319] do_syscall_64+0xf3/0x230 [ 389.964048][T13319] ? clear_bhb_loop+0x35/0x90 [ 389.968721][T13319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.974608][T13319] RIP: 0033:0x7f085737cef9 [ 389.979013][T13319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.998608][T13319] RSP: 002b:00007f085811f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.007012][T13319] RAX: ffffffffffffffda RBX: 00007f0857535f80 RCX: 00007f085737cef9 [ 390.014975][T13319] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000003 [ 390.022937][T13319] RBP: 00007f08573ef046 R08: 0000000000000000 R09: 0000000000000000 [ 390.030895][T13319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.038856][T13319] R13: 0000000000000000 R14: 00007f0857535f80 R15: 00007fffea389928 [ 390.046832][T13319] [ 390.049845][T13319] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 390.057108][T13319] CPU: 0 UID: 0 PID: 13319 Comm: syz.0.1795 Not tainted 6.11.0-rc6-syzkaller-00178-gd759ee240d3c #0 [ 390.067850][T13319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 390.077894][T13319] Call Trace: [ 390.081162][T13319] [ 390.084081][T13319] dump_stack_lvl+0x241/0x360 [ 390.088751][T13319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.093941][T13319] ? __pfx__printk+0x10/0x10 [ 390.098525][T13319] ? vscnprintf+0x5d/0x90 [ 390.102853][T13319] panic+0x349/0x860 [ 390.106738][T13319] ? __warn+0x172/0x4e0 [ 390.110886][T13319] ? __pfx_panic+0x10/0x10 [ 390.115304][T13319] __warn+0x346/0x4e0 [ 390.119276][T13319] ? __local_bh_enable_ip+0x1be/0x200 [ 390.124649][T13319] report_bug+0x2b3/0x500 [ 390.128971][T13319] ? __local_bh_enable_ip+0x1be/0x200 [ 390.134338][T13319] handle_bug+0x3e/0x70 [ 390.138487][T13319] exc_invalid_op+0x1a/0x50 [ 390.142980][T13319] asm_exc_invalid_op+0x1a/0x20 [ 390.147822][T13319] RIP: 0010:__local_bh_enable_ip+0x1be/0x200 [ 390.153794][T13319] Code: 3b 44 24 60 75 52 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 90 0f 0b 90 e9 ca fe ff ff e8 55 00 00 00 eb 9c 90 <0f> 0b 90 e9 fa fe ff ff 48 c7 c1 4c a3 18 90 80 e1 07 80 c1 03 38 [ 390.173391][T13319] RSP: 0018:ffffc90002e76f40 EFLAGS: 00010046 [ 390.179467][T13319] RAX: 0000000000000000 RBX: 1ffff920005cedec RCX: ffffc90002e76f03 [ 390.187447][T13319] RDX: 0000000000000005 RSI: 0000000000000200 RDI: ffffffff89877b3a [ 390.195502][T13319] RBP: ffffc90002e76ff0 R08: ffffffff901870ef R09: 1ffffffff2030e1d [ 390.203471][T13319] R10: dffffc0000000000 R11: fffffbfff2030e1e R12: dffffc0000000000 [ 390.211454][T13319] R13: 1ffff11005022120 R14: ffffc90002e76f80 R15: 0000000000000200 [ 390.219523][T13319] ? __dev_queue_xmit+0x2da/0x3e90 [ 390.224662][T13319] ? dev_hard_start_xmit+0x773/0x7e0 [ 390.229959][T13319] ? __dev_queue_xmit+0x2da/0x3e90 [ 390.235075][T13319] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 390.240794][T13319] ? __dev_queue_xmit+0x2da/0x3e90 [ 390.245903][T13319] __dev_queue_xmit+0x1763/0x3e90 [ 390.250925][T13319] ? kasan_save_track+0x51/0x80 [ 390.255783][T13319] ? ieee80211_do_stop+0x13d9/0x1f40 [ 390.261066][T13319] ? cfg80211_change_iface+0x782/0xf30 [ 390.266520][T13319] ? wext_ioctl_dispatch+0x58e/0x640 [ 390.271804][T13319] ? __dev_queue_xmit+0x2da/0x3e90 [ 390.276910][T13319] ? __se_sys_ioctl+0xfc/0x170 [ 390.281665][T13319] ? do_syscall_64+0xf3/0x230 [ 390.286346][T13319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.292420][T13319] ? __pfx___dev_queue_xmit+0x10/0x10 [ 390.297976][T13319] ? __copy_skb_header+0x437/0x5b0 [ 390.303092][T13319] ? __asan_memcpy+0x40/0x70 [ 390.307731][T13319] ? skb_clone+0x240/0x390 [ 390.312263][T13319] __netlink_deliver_tap+0x54d/0x7c0 [ 390.317642][T13319] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.322834][T13319] netlink_deliver_tap+0x19d/0x1b0 [ 390.327939][T13319] netlink_broadcast_filtered+0xe60/0x12a0 [ 390.333763][T13319] genlmsg_multicast_netns+0x93/0xd0 [ 390.339049][T13319] nl80211_frame_tx_status+0x8fa/0xda0 [ 390.344519][T13319] ? __pfx_nl80211_frame_tx_status+0x10/0x10 [ 390.350495][T13319] ? do_raw_spin_unlock+0x13c/0x8b0 [ 390.355691][T13319] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 390.361579][T13319] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 390.367909][T13319] ? ieee80211_report_used_skb+0x1621/0x2470 [ 390.373899][T13319] ieee80211_report_used_skb+0x19eb/0x2470 [ 390.379735][T13319] ? __pfx_ieee80211_report_used_skb+0x10/0x10 [ 390.385904][T13319] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 390.391361][T13319] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 390.397264][T13319] ieee80211_free_txskb+0x24/0x40 [ 390.402292][T13319] ieee80211_do_stop+0x13d9/0x1f40 [ 390.407412][T13319] ? __ieee80211_stop_queue+0x1fe/0x460 [ 390.412955][T13319] ? _find_next_bit+0xec/0x120 [ 390.417718][T13319] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 390.423167][T13319] ? ieee80211_stop_vif_queues+0x15b/0x1a0 [ 390.428969][T13319] ? __pfx_ieee80211_stop_vif_queues+0x10/0x10 [ 390.435115][T13319] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 390.441529][T13319] ieee80211_if_change_type+0x4cd/0xad0 [ 390.447080][T13319] ieee80211_change_iface+0xd2/0x4f0 [ 390.452358][T13319] ? cfg80211_mlme_purge_registrations+0x1fa/0x230 [ 390.458857][T13319] cfg80211_change_iface+0x782/0xf30 [ 390.464140][T13319] cfg80211_wext_siwmode+0x1bb/0x290 [ 390.469418][T13319] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 390.475216][T13319] ? __pfx___mutex_lock+0x10/0x10 [ 390.480239][T13319] ? full_name_hash+0x93/0xe0 [ 390.484918][T13319] ioctl_standard_call+0xe3/0x290 [ 390.489933][T13319] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 390.495725][T13319] ? __pfx_cfg80211_wext_siwmode+0x10/0x10 [ 390.501522][T13319] wext_ioctl_dispatch+0x58e/0x640 [ 390.506630][T13319] ? __pfx_ioctl_standard_call+0x10/0x10 [ 390.512253][T13319] ? __pfx_ioctl_private_call+0x10/0x10 [ 390.517791][T13319] ? __pfx_wext_ioctl_dispatch+0x10/0x10 [ 390.523413][T13319] ? __might_fault+0xc6/0x120 [ 390.528096][T13319] wext_handle_ioctl+0x15f/0x270 [ 390.533035][T13319] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 390.538499][T13319] sock_ioctl+0x17f/0x8e0 [ 390.542827][T13319] ? __pfx_sock_ioctl+0x10/0x10 [ 390.547670][T13319] ? __fget_files+0x29/0x470 [ 390.552253][T13319] ? __fget_files+0x3f6/0x470 [ 390.556922][T13319] ? __fget_files+0x29/0x470 [ 390.561507][T13319] ? bpf_lsm_file_ioctl+0x9/0x10 [ 390.566439][T13319] ? security_file_ioctl+0x87/0xb0 [ 390.571548][T13319] ? __pfx_sock_ioctl+0x10/0x10 [ 390.576393][T13319] __se_sys_ioctl+0xfc/0x170 [ 390.580980][T13319] do_syscall_64+0xf3/0x230 [ 390.585477][T13319] ? clear_bhb_loop+0x35/0x90 [ 390.590152][T13319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.596049][T13319] RIP: 0033:0x7f085737cef9 [ 390.600458][T13319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.620054][T13319] RSP: 002b:00007f085811f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.628462][T13319] RAX: ffffffffffffffda RBX: 00007f0857535f80 RCX: 00007f085737cef9 [ 390.636429][T13319] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000003 [ 390.644396][T13319] RBP: 00007f08573ef046 R08: 0000000000000000 R09: 0000000000000000 [ 390.652359][T13319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.660338][T13319] R13: 0000000000000000 R14: 00007f0857535f80 R15: 00007fffea389928 [ 390.668327][T13319] [ 390.671550][T13319] Kernel Offset: disabled [ 390.675982][T13319] Rebooting in 86400 seconds..